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ANALYSIS OF A MECHANICO-ELECTRICAL CRYPTOGRAPH 

PART II 



Section I 

INTRODUCTORY REMARKS 

Paragraph 

Nature of investigation 1 

1. Nature of investigation. — In April 1932, there was submitted to the Chief Signal Officer 
a modified form of the Hebern Cipher Machine with a view to testing it for its cryptographic 
security. 1 It was desired that the test be of the utmost severity, exceeding in severity what 
could be expected from an attack under the most favorable conditions. 

With this in view, there was furnished, with the machine, 55 messages with plain text and 
110 messages without the equivalent plain text; also the general system employed in setting 
up message indicators. (See Appendix I.) 

1 This test was made at request of the Code and Signal Section, Office of Naval Communications, 
Navy Department. The test was conducted by Mr. F. B. Rowlett, Dr. S. Kullback, and Dr. A. Sinkov, under 
the supervision of Mr. W. F. Friedman, Chief of Signal Intelligence Section. 

( 1 ) 
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Section II 

DESCRIPTION OF MACHINE AND ITS OPERATION 



Caragmph 



General description 2 

Motion of the wheels 3 

Ratchet cradle 4 

Functions of LAW and RAW 5 



Paragraph 

Detailed study of a particular dog setting. 

Study of cryptographic action 

Action of possible dog settings 



2. General description.— The 1932 model of the Hebem Cipher Machine consists of a 
keyboard, a set of five cipher wheels, a set of five pawls for controlling the angular displacements 
of the cipher wheels, an arrangement for governing the action of the pawls, a mechanical drive 
for angularly displacing the cipher wheels, and an automatic printer. This model requires 
a current supply of 110 volts direct current. 

3. Motion of the wheels.— From a cryptographic standpoint, the essential difference between 
this and the previous model rests almost entirely on the difference in the type of cipher-wheel 




displacement utilized by the two machines. (See W. F. Friedman, Analysis of a Mechanico- 
Electrical Cryptograph, Part I, Technical Publication S. I. S., 1934.) In the earlier model, the dis- 
placements of the cipher wheels are definitely fixed and invariable, being similar to the movements 
of the wheels in a recording meter. Only the fifth (or extreme right-hand) wheel steps forward 
continuously once per depression on the keyboard; the first wheel steps forward once per 26 
depressions; and the middle wheel steps forward once per 650 depressions. Wheels 2 and 4 nrc 
displaceable only by hand, and not automatically. In the 1932 model the arrangement is no longer 
meterlike— any two of the five cipher wheels (depending upon the action selected) may move 
continuously, a third wheel moves one stop per 26 depressions on the keyboard, and the two 
remaining wheels move one step after 650 depressions on the keyboard. 

4. Ratchet cradle— The accompanying diagram, figure 1, shows the mechanical means 
which causes the wheels to move forward. 
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This means consists of a racliet cradle upon which are mounted two dog bars carrying three dogs, 
five cipher-wheel pawls, three aluminum-wheel pawls, and an arrangement (not shown in the 
diagram) for releasing all the pawls while the wheels are being set. The action of the dogs is 
controlled by two aluminum wheels, LAW and RAW, which are mounted on the left-hand side 
of the machine in a line with and on an extension of the shaft upon which revolve the cipher 
wheels. LAW and RAW, however, move independently of the cipher wheels. 

The front dog bar lias two dogs mounted upon it and provides five active positions which 
are designated by the first 5 letters of the alphabet, A, B, C, D, E, as is shown in figure 1 . The 
back dog bar has only one dog mounted upon it, and also provides five active positions designated 
by the last 5 letters of the alphabet, V, W, X, Y, and Z. 

The construction of the two aluminum wheels, LAW and RAW, is identical and is such 
that the periphery of each of the two wheels is divided into two bands. The left-hand band of 
each wheel has 26 teeth, each tooth being designated by a letter of the alphabet. The right- 
hand band is smooth throughout the entire circumference of the wheel except for a notch 
which extends from the letter Y to the letter Z. 

The five cipher-wheel pawls, CWPl to 5, are mounted upon a shaft which is located under- 
neath the two dog bars. Each pawl lias two notches on it (not shown in fig. 1), one situated 
for acting in association with a dog on the front bar, the other situated for acting in association 
with a dog on the rear bar. Since the dogs are individually slidable on their bars, the five 
pawls may act independently. When a dog situated either on the front or the rear bar is in 
position, the pawl immediately beneath it is withdrawn from its active position and is prevented 
from stepping the cipher wheel forward, except in those special cases when the action of the 
dog is neutralized by the action of either the LAW or RAW, as will now be discussed. 

5. Functions of LAW and RAW. — The three aluminum-wheel pawls, AWPl, AWP2, and 
AWP3, are mounted upon an extension of the shaft holding the cipher-wheel pawls. The first 
aluminum-wheel pawl, AWPl, acts each time a key is depressed and moves tho LAW forward 
one space; that is its only function. The action of AWP2 is controlled by the LAW in the 
following manner. On the left side of AWP2 there is a projection upon which is mounted a 
small roller, designated roller 1 in the sketch. This roller normally rests upon the smooth 
band on the right-hand side of the LAW and, when such is the case, AWP2 is out of action. 
However, when the LAW moves to the position where roller 1 falls into the notch in the right- 
hand band, AWP2 acts in two ways: (1) It engages the RAW and moves it forward one space; 
(2) AWP2 is connected to the back-dog bar by a lever, and the arrangement is such that the 
action of the back dog is neutralized when roller 1 of AWP2 has dropped into the notch. This 
allows the cipher-wheel pawl that is temporarily associated with the back dog to engage its 
cipher wheel and move it forward one space. The roller of the AWP is so placed that when 
the peripheral letter I on the LAW is at the bench mark, AWP2 engages the RAW, and the 
cipher-wheel pawl that is temporarily associated with the back dog engages its cipher wheel. 
Since the notch in the right-hand band on LAW must present itself to roller 1 once per complete 
revolution of LAW, and since this will happen once per 26 depressions on the keyboard, it 
follows that the cipher-wheel pawl that is temporarily associated with the dog on the rear bar 
will step the associated cipher wheel forward one step per 26 depressions on the keyboard. 

AWP3 acts both upon the RAW and the front-dog bar. On the right-hand side of the 
AWP3 there is a roller (roller 2) similar to that on AW T P2. Roller 2 rests upon the smooth 
band of the RAW, except when the RAW is so set that its peripheral letter I is at the bench 
mark. At this point roller 2 drops into the notch and allows AWP3 to engage the RAW and 
also neutralize the action of the front dogs, allowing the two cipher-wheel pawls temporarily 
associated with these dogs to engage the proper two cipher wheels. 
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Table I . — Successive settings of all wheels 
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(5) CW3 progresses one step per depression; 

(6) CW4 acts similarly to CW2; 
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iGH-AZZZZ. * GH-B YZYZ = 652d tetter of message. • ZYZYZ (704). 

i CZZZZ . • AYZYZ . » ZYYYY (705) . 

1 HI-BZAZA . 



Figttbe 2 

N.B. — The letter I appears on RAW for only one depression of the keyboard. The wheels for the 2d 
and 705th letters are in the same positions relative to each other. Similarly for the 3d and 706th, 4th and 
707th, etc. With the exception of the 1st letter, any two wheel settings separated by 703 letters are in the 
same relative alignment. 
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In figure 2 the letters indicated are the letters at the bench mark. The notch in the LAW 

th , 6 m °r° n t h“ 26 ” Wheel comes P Ift y when the Otters opposite the 
1 to a Therefore, for each line of the diagram the “26 ” wheel remains 
stationary. The 1 wheels move, of course, from column to column but remain fixed in any 
single column. The RAW is so constructed that no matter what the position of LAW, RAW 

VJw aft ^° ne depre8sion instead of after . 26 depressions, as is the case in all 

S-JSS ° n m G , m r ement ,° f RAW from 1 to H induces the movement of the 

650 wheels. For the block of 650 outlined, the motion then is as follows: The “1” wheel 

moves for each letter; the “26” wheel moves in passing from line to line; the “650” wheels 
move m passing from block to block. 
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1 P lp °r fca " ce of a thorough understanding of figure 2 is, that if it is possible to determine 
exactly when in the course of encipherment of a message the “650” wheels were displaced, it 

l P T bIe ? ete T in - *5® ® XaCt initial Settings of LAW and RAW (^ve for the two excep- 
tional cases referred to m footnote 1 below). ** 

BT a m«l« StU f dy °- f 7pt0grap ^ c a ® tion — We may now proceed with a discussion of an actual 
example of encipherment. Let it be assumed for this example that the initial setting is as 

Permutation of wheels: 

Alignment of wheels: A A A A A A A 

Dog action: BDV 
Switch lever set ting - “CODE” 

[ The above setting is that depicted in figure 1 ] 

Fioubb 3 

tiaa is read y for operation at the instant the current is turned on. Let it be 

assumed that the message begins 
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at HH T tte re firrf irrrr the « 8 c 1 , tU , ati0n depicted ** figure 2 - If the °°"t«>l wheels were set originally 
^ l C ° n 651 lettCrB * a,thou « h ^reafter the motion would be as in figure 2 H 

the control wheels were set originally at 01 (in which 0 is not HI the w i,_i. „ ■ lf 

letter was enciphered and therSSe/the moiion would “oXm 2. “ ** ** 
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When the encipherer depresses the key R, two switches are closed. One of these controls the 
printing circuit and the other the mechanical device which steps the wheels forward. In the 
printing circuit, the current leaves the contact corresponding to key R, passes to the letter R 
on the RFS; 1 from R on the RFS it goes through the cipher wheels to E on the LFS; from E on 
the LFS the circuit goes to the solenoid corresponding to E in the back of the printer where it 
is translated into a mechanical action, and the letter E is printed. 

While the cipher letter is being printed, the magnet controlling the mechanical device is 
energized and causes the motor to move the ratchet cradle downward and back to its original 
position. When the cradle has reached its lowest point, CWP3, CWP5, and AWPl engage 
their respective wheels and step them forward on the upward thrust. The machine is now in 
position to encipher the second letter of the message. The setting for the second letter will be 
ZA-AAZAZ. The enciphering operation is the same for the following 18 letters. However, at 
the encipherment of the nineteenth letter, the LAW will be so set that I is at the bench mark, 
and the roller of AWP2 will fall into the notch on the periphery, causing the RAW to move 
forward. The action of the back dog will be neutralized during this instant, and the cipher 
wheel pawl governed by it will be permitted to act. Since the back dog is set at V, CWPl will 
be liberated and CWl will move forward one step accompanied by CW3 and CW5. At the 
end of the encipherment of this letter the setting is 

w •■O 

& H « B v u 

3_c£ a u o 5 o 

H Z Z A H A H 

Fioubb 4 

For the next 26 letters, CW3 and CW5 will move forward continuously and, with the enci- 
pherment of the forty-fifth letter, the action described immediately above will be duplicated. 

From this point on, the RAW and CWl will move forward one step with each 26 letters. 
However, after 17X26+18 letters have been enciphered from the initial setting, the alignment 
of the wheels will have become 

^ ^ 

s s h cm eo w in 

< < EC & EC ES EE 

■3 K U U U O U 

J J J A J A J 

Figure 5 

1 In the earlier model of the machine when the switch is at the “direct” or enciphering position, the key- 
board is connected to the LFS. In the 1932 model, however, the reverse of this is true. The current flows from 
the key contact to the RFS, through the cipher wheels to the LFS, and from the LFS to the proper solenoid 
of the printer. For the RFS, LFS, and wiring of the wheels, see pages 12 and 13. 
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When the key corresponding to the next plain-text letter is depressed, the CWP3, CWP5 and 
AWPl will engage their respective wheels and move them forward to the setting 
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letter » the roller of AWP2 will fall into the notch of LAW and will cause RAW 
and GWl to move forward with CW3 and CW5. The setting is 

_ "d TZj ’"O '"C) 
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Figure 7 



, ^ e 1 ne f‘ letter ** roller of AWP3 will faU into the notch of RAW and the CWP2 

and L-WP4 will be liberated so that they may engage CW2 and CW4. The AWP3 will also 
engage the RAW, moving it forward along with cipher wheels 2, 3, 4, and 5, and the LAW giving 
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Figure 8 



f° r t iVw 0i ? he T ent ° f the next letter - Now CW2 and CWS wil1 not move forward again until 
the RAW has been rotated to I It will be noted in the case considered above, that the 

RAW on reaclung J moves forward two spaces for one revolution of the LAW. This particular 
setting of the RAW is the only one which allows such a motion. 

8. Action of possible dog settings.— The displacements of cipher wheels in the example thus 
far studied corresponded to those for a BDV setting of the dogs. What would happen for other 

the three do^ 6 f ° U ° WinB table shows the dia P lacementa for each of the 50 possible settings of 




Table II . — Showing cipher-wheel dixplacemcnls for all dog teltings j 




Not all the settings shown in table II, however, were used in the test messages, as will 
be noted from a careful reading of the instructions set forth in Appendix I. Informally, it 
was stated that a limited number was employed, but the basic principles followed in the selection 
of settings actually used were not disclosed. 
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9. Preliminary preparation. — The first step in the analysis is, of course, to record the exact 
wiring of the LFS, RFS, and the various cipher wheels, so that the mixed-alphabet sequences 
may be transcribed upon sliding strips which may be employed in tr acing through the exact 
paths followed by the electric current in encipherment or decipherment. 1 The wiring of the 
six cipher wheels was kindly furnished by the Navy Code and Signal Section, to eliminate the 
small amount of labor that would be involved in this dete rmination . The wiring 0 f the LFS 
and die RFS was determined in collaboration with a representative of the Navy Code and Si gnal 
Section, with a simple testing circuit including a voltmeter. The wiring of the foregoing ele- 
ments is as shown below: 
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1 See Section III of Part I. 
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Cipher wheel 6 d 

Right ABCDEFGHIJKLMNOPQRSTUVWXYZ 
Left CGKUPFWOSXQEZJIBLHTRDNAMVY 

Bench 

mark RFS (right fixed sequence) 

l 

YLVRZXCPFOIQAMJBNSEKDGHTUW 

Bench 

mark LFS (left fixed sequence) 

l 

TEGDNSXUPQYVHAMBKRFJLZIWOC 

Figube 9 

The foregoing alphabets of the cipher wheels, for purposes of analysis, must be converted 
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(see par. 8 of Part I) 
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Figubb 10 



The foregoing alphabets are now transcribed upon sliding strips and made ready for use. 

10. Glassification of messages. — In what follows we shall refer to and classify messages 
according to the final letter of the dog-action setting, V, V, X, Y, or Z. By a “V” message, for 
example, we mean one in which the dog-action setting is by a “Z” message we mean one 
in which the setting is BfitL. 

In respect to the foregoing classification, the types of messages which lend themselves most 
readily to study belong to the “V” or “Z” classes, for reasons which will now be explained. 
We first take up “V” messages. 

11. Conversion of “V” messages. — Suppose that the cipher wheel in position l 1 has been 
determined, together with its initial setting and motion. It is then possible to convert the 
message into a new cipher from which the effect of the LFS and the first cipher wheel has been 
removed. In fact, if the motion and identity of any number of consecutive cipher wheels begin- 

1 We number the wheel positions from left to right. 
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ning from the left have been completely determined, the effect of the LFS and these wheels 
may be removed from the particular message so that only the remaining cipher wheels have any 
effect in producing the converted message. 

To illustrate, suppose it is known that a particular cipher letter Q representing E p was obtained 
with CWld set at F in position 1. The permutation and settings of the remaining wheels are 
temporarily of no consequence. Then, since Q on the LFS is opposite position 10 on BSl, the 
current must have come from the tenth letter on MAL I, viz, S. The S of NAL1 is opposite 
position 14 on BS2, and it may therefore be concluded that the current producing the letter Q 
in question passed through the fourteenth contact of the second bakelite separator. This 
information may be diagrammatically represented as follows: 

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 

FGHXJKLHNOPQR^TUVWXYZABCDE 

LNRCHZEWA G T J 0VKDIYXUFBQ1IP 
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 

tegdnsxup<|yvhaiibkrfjlzi V0C 

Figure 11 

If the successive contacts of BS2 were identified by means of a normal sequance, position 
14 would correspond to letter N, and the current could be said to have come from N on BS2. 
In other words, the action of the last four cipher wheels, i.e., those in positions 2, 3, 4, and 5, 
may be considered to have resulted in a replacement of Ep by N e . 

If the setting of the second wheel were also known, the conversion, i.e., the elimination of 
the cipher wheel in position 2, could be carried over to BS3. 

Of course, the foregoing applies to a single letter only. But, if the left-end wheels were 
known not only as to identity and position but also as to motion, then the motion could be 
taken account of and the conversion carried through for the entire message. 

Returning then to a consideration of a ‘‘V” motion in connection with the foregoing reason- 
ing; suppose it possible to determine the first cipher wheel and its initial setting. Then, since 
a “V" motion means that the cipher wheel in position 1 steps forward once eveiy 26 letters, a 
complete conversion to BS2 can be carried out. Moreover, no difficulty can arise in connection 
with the exact place in the message where this cipher wheel steps forward, because the initial 
setting of the first wheel gives the initial setting of the left control wheel and hence determines 
just where each line of 26 letters begins. 1 

If the converted message is written out in lines of 26 letters, then in each column we have 
letters which have been enciphered with the last four cipher wheels in exactly the same position; 
hence all letters within the same column belong to the some monoalphabet. It is thus seen 
that a “V” message whose first wheel is known, when correctly converted, becomes a poly alpha- 
betic substitution cipher of 26 alphabets. The latter may be recognized or detected by 
the usual tests based upon repetitions and the normal appearance of monoalphabetic distri- 
butions. 

12. General observations on "V” messages. — A method of attack is thus indicated. If a 
message is suspected to be in a “V” motion, a conversion can be carried through for every possible 
wheel in every possible bench-mark setting. The correct assumption will yield a message arranged 
in 26 alphabets, which may be recognized by the usual external phenomena. Since there are 
six wheels, each of which may assume two positions and 26 settings on each wheel, the total 

1 See Appendix I, instructions issued with Hebem, par. 2 (c) (2). 



BS2__. 

NAL1. 

MALI 

BSl... 

LFS... 
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number of trials necessary for any single message is 6X2X26=312. Foreachof these trials the 
converted message must be tested to determine whether or not it is now in the form of a set of 
26 monoalphabets from left to right in the successive columns. 

Naturally, for such tests the length of the message is very important, for unless there are 
enough elements in a frequency distribution it is very difficult to tell whether we are dealing 
with a random or a polyalphabetic distribution. Consequently, we should make our tests 
first upon the longest message wo can find and then, if no “V” message is indicated, try the next 
longest message, and so on. Accordingly, Serial No. 183, with 1,420 letters, the longest in the 
set of 110 cipher messages, was the first one selected for experiment The results were negative, 
i.e. f the tests indicated that the message was not a “V” message. Since the steps followed are 
tha same as in a successful test, the details in connection with this negative experiment can be 
omitted in favor of those in connection with a successful experiment. 

13. Application of principles to a suspected “V" message. — Consider the second longest 
message, Serial No. 210, with 1,325 letters. 

This message begins as follows: 

0CRYP HWK0N QCPJI MUNDK GZLYY JLFZG . . . 

Let us assume that CWld occupies position 1. Let us further assume that the initial 
bench-mark setting for CWl is A, so that 19 letters will be enciphered before CWl moves. 
Then the conversion equivalents (to eliminate LFS and CWl) for the first line of cipher text 
are obtained by Betting MALI— NAL1— BS2 against the LFS so that A on NALl is opposite T 
of LFS (the initial or bench-mark setting). 

The dia gr am of sliding-strip alphabets for the conversion is as follows: 

BS2 ABCDEFGHIJKLMNOPQRSTUVWXYZ 



NALl ABCDEFGHIJKLMNOPQRSTUVWXYZ 

CW1 MALI FBQMPLNRCHZEWASGTJOVKDIYXU 

LFS TEGDNSXUPQYVHAMBKRFJLZIWOC 

Figure 12 

By tracing each cipher letter bock from LFS to BS2 on the foregoing diagram, we get the 
following conversion equivalents: 

1 2 S 4 S 6 7 8 9 10 11 18 U 14 It 18 IT » 11 

Cipher 0CRYPHWK0NQCPJIMUND 

Conversion equivalents XUJZCWYTXPHUCVISRPM 

Figure 13 

To obtain the equivalents for the second line of cipher text, we must now shift MALI— NALl 
one interval forward, to take into account the fact that CWl has stepped forward one interval. 
BS2 remains stationary. The diagram of alphabets for this conversion is as follows: 

BS2 ABCDEFGHIJKLMNOPQRSTUVWXYZ 

NALl ZABCDEFGHI JKLMNOPQRSTUVWXY 

CW1 MALI UFBQMPLNRCHZEWASGTJOVKDIYX 

LFS TEGDNSXUPQYVHAMBKRFJLZIWOC 



Figure 14 
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The conversion equivalents for the second line are then as follows: 

123458789 10 11 

Cipher KGZLYYJLFZG . . . 

Conversion equivalents HCLWIIPVKLC . . . 

Figure 15 

To obtain the equivalents for the third line of cipher text, NAL1-MAL1 is displaced one 
more interval (forward) to the right, and so on. 

14. Index of monoalphabetioity. — When this has been done for the whole message, the 
columns of conversion equivalents are examined from the point of view of their possible mono- 
alphabeticity. Of course, one could study the columns for repetitions of single letters within 
columns, as well as for repetitions of digraphs, trigraphs, and polygraphs. But this would 
require much time and the compilation of many frequency distributions. A better way is to 
try to establish monoalphabeticity by statistical methods. For this purpose we may set up, 
theoretically, or by calculation on actual plain text, an index of monoalphabeticity with which 
a calculation for unknown text should agree within limits of variation due to chance. The plain 
text should be arranged in horizontal lines and the frequency distributions for individual columns 
then prepared; in order to have accurate results, the number of columns and the number of 
elements in each column should be fairly large. 

In each distribution the sums of the squares of the frequencies should be found. The 
index itself and the limits of variation should then be obtained by finding the mean and standard 
deviation for all frequency distributions. For a monoalphabet of T letters the mean of the sum 
of the squares of the absolute frequencies is, theoretically, given by S I =0.066 T*+0.934 T. (For 
a more complete statistical discussion of monoalphabeticity, see S. Kullback, Statistical Methods 
in Cryptanalysis , Technical Publication of the Signal Intelligence Section, 1934.) 

To apply these results to the problem in hand however, a slight modification is necessary. 
The foregoing index applies to the case where a frequency distribution contains T letters and 
is strictly monoalphabetic. In our problem, however, we can never expect these two conditions 
to obtain, because, firstly, at a maximum there can be only 25 letters in each monoalphabet 
(for after 25 lines have been enciphered the “650” wheels move and consequently the twenty- 
sixth letter in the column belongs to a different alphabet than do the first 25 letters); secondly, 
we do not know where this “650” break occurs in the message. It may occur after the very 
first line, or after the second, third . .. . line. Consequently, it can easily happen that in taking 
only 26 letters per column we may be assimilating 10 letters of one monoalphabet with 16 of 
another, or 11 of one and 15 of another, and so on, so that the index for pure monoalphabeticity 
would never be closely approximated. We may, however, be sure of one thing: If we should 
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take columns of 36 letters, the number of letters that may fall in the respective alphabets can 
be only as follows: 

Table III 



Second 

alphabet 



Third 

alphabet 





The worst possible oases for our purposes are those in which three different alphabets enter. 
The best possible cases are those in which only two alphabets enter. 

We may, however, assume theoretically that those ten cases m which the 36 letters fall 
into three different alphabets would not distort the index for monoalphabeticity veiy much, 
since the letters falling in one alphabet (25) are much more numerous dian those falling into 
each of the two other alphabets. In fact, the index may perhaps not be distorted any more 
in those cases than in the ones where the distribution is Iff in each alphabet, or 17 in one and 19 
in the other, or 16 in one and 20 in the other. Consequently, if we consider that the case m 
which the letters are divided equally between two alphabets is perhaps the worst for our pur- 
poses, even then we have only bialphabeticity to deal with. . . . , 

Our problem is therefore now one not of strict monoalphabeticity but of approximate 
bialphabeticity. What is the index for that? Actual calculations upon several distributions 
of sets of 36 letters in two different alphabets gave an average index of 94 for the sum of the 
squares of occurrences of letters for the case where the 36 letters were evenly divided between 

tW ° Foroux^purposes, therefore, we may assume an index of 94 to be the minimum permissible 

in studying columns of 36 letters. . . ...... . 

15. Application to Serial No. 210.— When the calculations pertaining to this index of 

bialphabeticity were applied to the various conversions of Serial No- 210, according to the 
different cipher wheels, the calculation applicable to the case where CW2r was in position 1, 
with H at the bench-mark setting gave, for the first five columns, indices that seemed conclusive. 

Thus: 

[Index 112] 

ABODBFOHI JXLMNOPQRSTTTVWXYZ 



Figube 16. — Distribution for column 1 

and similar results for the columns 2, 3, 4, and 5. 




The message was accordingly completely converted and transcribed. In this transcrip- 

I* 17 * l6tter ° f th ® messa « e under H of LAW sequence, since under 

fZSiSr tha - t . tlie initid 9etting of LAW 811(1 4116 wheel in position 

1 must coincide. Note the repetitions that appear! 



Fiqtjre 17 . — Serial no. 610, converted 

FROM: NAVAL STATION GUAM 
TO: OPNAV 

INDICATOR: 1003 EHHBE VGBKL 



3 MARCH, 1932 



U ^ E> n n n n ? ® 10 11 12 13 14 10 10 17 18 10 20 21 22 23 24 25 2fl 

HGFEDCBAZYXWVUTSRQPONMLKJI 



K|F GBR 

V H V M B 
P V B W X 
W F B I K 

V C E M R 

V G U M L 
P F R M R 
D S F ff B 
KGEEA 
P C H E A 
J C P H A 
Q F I M_L. 

1 GUM Z 
P G U D I 
D B Q M I 
G F E M A 
I M T U F 
G G F E R 
P Y F H F 
CCUBI 
L H T N B 
G C E N I 
Q B V R A 
S H T S M 
L 



PSYKC 
NH0SU 
PIY0X 
LCZQR 
N J P 0 0 
B M X A A 
T L C ff K 
P S U N P 
N J Y K J 
X L Z L ff 
S P O O A 
B M B X ff 
N J K E V 
X Q Y Z V 
K Z E Z 0 
X L U N J 
N X V L A 
P R P L J 
D S 0 N M 
F D R P ff 
B ff E 0 L 
M V V A I 
S P M S C 
L Z F Q ff 



N F R 
R J R 
NYB 
RFO 
R F Q 
N N Y 
0 B C 
K H M 
K A R 
V B 0 
UQL 
E F F 
P H F 
L L B 
O B B 
P K U 
0 R L 
U A R 
T B 0 
A G H 
K L I 
UAH 
K F M 
N ff Q 



: V H T X C 
: Q S Z F D 
AS0ZI 
K A M M E 
CKSDE 
C V T N A 
E U S H P 
N W P K L 
D S G N S 
C U I S D 
6 v CIO 
G A Y Y D 
E V C S Q 
C B J X R 
X A A F ff 
U F G D B 
X C I X 0 
ff K I J A 
G H S V T 
JSNffff 
W A CIO 
T A J V J 
0 A Z D G 
ff C E V G 



E Y ff J U 
i I J U D U 
P ff B_Y C 
ST JDC 
M M V L B 
F N B L K 
E I B X S 
N ff E N A 
R U V E Q 
N Y C Z T 
U I C G G 
K T_B Y T 
G T B X U 
U U 0 Q B 
N B C Q I 
K U S G Q 
ff T_B E B 
E I B_Y S 
M E C Y ff 
N T C R I 
J I ff J L 
H J P C Q 
V U I R T 
E C BYT 



l B B V 
IKYH 
Z I H 
J B G 
Q Y R 
M M R 
MGS 
LIQ 
U HR 
X G I 
J Y R 
X ff B 
X M Q 
Z F S 
X B V 
L S V 
X 0 D 
K J J 
ff H R 
M H U 
Y A D 
L H_R 
X M I 
0 B Q 




Figure 17 . — Serial no. 610, converted — Continued 

FROM: NAVAL STATION GUAM 
TO: OPNAV 

INDICATOR: 1003 EHHBE VGBKL 



3 MARCH, 1932 



1 2 3 4 3 3 7 8 9 10 11 12 13 14 15 lfl 17 18 19 20 21 22 23 24 25 28 

HGFEDCBAZYXWVUTSRQPONMLKJI 



28 N 

29 j 

30 p 

31 i 

32 Q 

33 u 

34 T 



37 B 



45 ff 

46 Q 



D F F R 

V L L A 
0 E R U 
P E H X 

V P C D 
G G Y 0 
T Y D L 
J T V U 
D P Z 0 
X C R E 

V U V E 
X C R U 
ff R X J 
G K D A 
ff E U 0 
N P C I 
Q E K N 
D G X Z 
D P C S 
T F D L 
G L E ff 

V H U U 
J H C R 
J T X X 
T P C P_ 
J H C L 



L G 0 
P A Z 
S F Z 
X B I 
SDK 
Z Q B 
H S Q 
F W S 
F E V 
Z G I 
N D H 
B P Q 
G S M. 
X ff C 
BQH 
B G I 
N G I 
N S B 
C S 0 
N S J 
G E K 
R H H 
P F K 
K Z R 
C Y S 
X D Q 



D U Q N 
L K Q G 
G I J L 
L C Q Q 
Q R H A 
0 K S ff 
E N C Z 
T P Y G 
N I Z R 
U N Y C 
T U 0 V 
A U N Y 
L G C L 
J H H D 
L G C L 
X B Q Q 
U E R J 
0 M Q U 
L G U X 
L N Y G 
X Z N Q 
0 M N E 
V G N A 
G U B H 
T I 0 Z 
0 J Q D 



L J S 
A I 0 
N V M 
X I S 
K I K 
B I C 
P ff S 
B Z M 
M F R 
Q W S 
RTS 
X Y I 
A Z S 
D V M 
A Z S 
X M K 
B Q C 
P 0 R 
A Z N 
L E C 
R E Y 
HIT 
BAS 
B G K 
P J T 
U ff S 



C K ff 
P U V 
SQG 
X M V 
U I H 
LUJ 
Q J H 
F Z K 
F B K 
C F E 
Q M jL 
CKO 
U I M 
SUE. 
UUG 
F I M 
I S J 
F U V 
A JE 
IIP 
M Y J 
C F E 
X P 0 
Y B K 
Q X E_ 
I S K 



R Z L 
F ff G 
P J L 

0 M Z 

1 A F 
K S_0 
X Y F 
X Y P 
K X H 
Z S 0 
K Z R 
D S 0 
PJL 
F M H 
P M S 
PHP 
I X Z 
0 Z L 
F S 0 
B Z C 
ff T D 
B L E 
A Q M 
B M 0 
PUD 
P S 0 



D Z K J 
U G V C_ 
0 M ff C 
H X A C_ 
R W T K 
J G 0 P 
F ff Y S 
B X A I 
K P N U 
Q R U V 
Q V L H 
V G A V 
U M E D 
Z D Y V 
U Y C 0 
M M D D 
N D L Y 
U C D 0 
F ff L I 
Q P V B 
K C A V_ 
R N D Q 
U A F G 
M ff D I 
U Z W F 
R R ff V 



K 10 



U 15 
A 16 



X 26 
I 1 



51 JPDB JRVESOXXPVAPOBTRFPO 7 

16. Relation between alphabets in different blocks. — It is dear that all the 51 letters in 
any one column of this converted cryptogram c ann ot belong to the same monoalphabet. At 
most, only 25 of them can do so. There may be two or three monoalphabets involved in each 
column, depending upon where the “650” breaks occur. Thus, we may outline the distribution 
of the 51 letters as follows: 
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By a careful study of what repetitions do appear, we are led to believe that the break occurs on 
line 25 and we may tentatively block out the message as shown herewith: 




If the foregoing is correct, then the second letter of the message indicator (VGBKL) equals I p . 
(Refer, in this connection, to fig. 2.) 

The following two points in procedure should be carefully observed since they are of frequent 
application in the solution of the messages submitted. 

(1) The method of message indicators is essentially a polyalphabet of five alphabets. 
As a result, if the letter D in the indicator DMSCH enciphers F p , then an initial D in any other 
indicator will also represent F p . Similarly the determination of the equivalent of any letter in a 
given indicator giveB the equivalent of that same letter in the same position in any other indicator. 

(2) The initial setting of a wheel determines whether it is to be inserted in a direct or 
reversed position. Hence, if it has once been determined that CWl originally set at F is direct, 
then any other wheed set at F must also he direct. 

We have before ub now not one but two independent problems, each involving 26 mixed 
alphabets, with but 25 letters in each alphabet. (The single letter at the beginning of the 
message and the last line can be of very little help.) The difficulties of reaching a solution 
under these circumstances require no further comment. 

If we could relate the two blocks in some way, perhaps the difficulties could be reduced. 
Why not take advantage of the “703” cycle mentioned in paragraph 6, if possible? 

Under the conditions of the system we know that after 703 letters have been enciphered 
the five cipher wheels have returned to their original positions relative to one another. The 
only change that has occurred in the setting of the machine between the 2d and the 705th 
letters is that the five cipher wheels have, as though they were permanently fixed on the hori- 
zontal shaft, been displaced one step forward between the LFS and the RFS. This is equiva- 
lent to a forward step of all the paths which the electric current traces out between the 
wheels. Consequently, if on the 2d depression a current enters the wheels from the RFS at 
Y, for example, and emerges from the wheels at T on the LFS, on the 705th depression a cur- 
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rent entering the wheels from the RFS at L (the letter that follows Y on the RFS) must emerge 
from the wheels at E (the letter that follows T) on the LFS. Since all letters 703 intervals 
apart are related in the same manner, we can use this fact to advantage. But, first we must 
take into account the fact that our transcribed message represents the conversion text, not 
the original cipher text. How are sequent letters of the LFS related in the converted text? 
Obviously, tho method of establishing the conversion text indicates that if T, of the original 
text is replaced by Z in the conversion text, then E e of the original text will be replaced by A 
in the conversion text, since T is followed by E on the LFS, and Z is followed by A on the BS2 
sequence. (The reader should refer to the sliding strips with CW2r set at H in position 1.) 

Now refer to the second letter of the conversion text. It is F, and there are five of them 
in column 2 of the first block. Whatever 6 0 the letter F represents, it is the same for all five 
occurrences. Suppose for a moment that 0=E. If the letter G which follows F on the bakelite 
separator were the 705th letter of the converted text, its plain-text equivalent would be K, 
because K follows E on the LFS. But one can say even more. Since the conversion has 
produced monoalphabets in the columns of each block, any G« in the third column of the 
second block would have the same value as a G c in position 705. There are two G’s in this third 
column; if the assumption 0=E is correct, then both of these letters must represent K. Such a 
result is not very likely as we would not expect K p to occur two times in but 25 letters, hence 
the assumption 0=E is not a good one. If 0=T„, then G=U P) which is again unlikely. Thus, 
we examine all the possibilities and pick out these as most likely: 

F=0 P F=A P F=N P F=Sp 

G=I P G=Mp G=S P G=Ej, 

Figure 19 

Enough has been indicated to show the procedure. Were the message long enough, say 
about 600 words, then there would be available at least four blocks of "703” cycles for com- 
parison and check on assumed values and there is hardly any doubt but that such a message 
could be solved within a reasonable length of time. One could tabulate the frequencies of A a 
in the first alphabet of block I; the frequencies of B„ in the second alphabet of block II; the 
frequencies of C„ in the third alphabet of block III; and so on. Suppose A s represents E^,; then 
B e , C, . . . would represent Kp, D p , . . .in sequence. The weight assigned to a particular 
arrangement is given by the product of the frequency of each cipher letter and its corresponding 
plain-text letter. If A* is assumed to represent T„, then a different set of plain-text letters and 
consequently a new total frequency would be obtained. The correct result will be theoretically 
determined as that one which yields the greatest weight. Letters obtained on this basis can 
then be inserted in the message. Here, however, we have only two such blocks; sufficient mate- 
rial is not at hand to permit of solution within a reasonable length of time. However, it must 
be stated that an earnest attempt was made to solve this cryptogram on the basis of the observ- 
able repetitions and the “703” phenomenon but without success. It seemed necessary to 
elaborate better methods of attack if the problem were to be solved at all. 

17. R6sum6. — Let us set down the difficulties in their broad outlines. First, there are 
those connected with the determination as to whether a given cryptogram is in a "V” motion. 
We saw that long messages are necessary for this determination and that the process may involve 
a maximum of 312 different trials, each quite lengthy. Next there come the difficulties of 
determining just where the “650” break occurs in a message that has been found to be in a “V” 
motion. Then there come the difficulties involved in attempts to solve a polyalphabetic sub- 
stitution cipher of 26 nonrelated, random-mixed alphabets, or, at most, of two related sets of 
such alphabets. 

Let us see if we can eliminate some of the difficulties of the first sort and facilitate the dis- 
covery of “V” messages. 
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First-interval data, cipher-text relationships — 19 Find interval data, pWn-tert relaMonshipB. 26 

Application of first-interval data to a known “V” Application of plain-text relationships to mes- 

StatSrtudVrf “V" message 21 Application of plain-text relationships to mes- 

Rfo um* 22 sages with unknown plain text « 

Application of statistical method to an unknown 
message (Serial No. 189) 23 

18 “V” messages with known plain text. — Suppose we make the problem more easy by 
studying certain phenomena in a known “V” message with known plain text. Let the mes- 
sage indicator (enciphered) be MCDDU. 

^ ^ ^ ^ ^ ^ ^ B 10 u u „ M „ „ „ Jg u 30 21 32 as M 25 SB 

IP 0FFICERC0NSIDEREDFAIRLYREL 
1C CFRYHGUYGKIENZUNWWIBLIMRJY 
2P IABLEATTACHEDT0Y0UNGMARSHA 
2C TPCNI YVSXXQDDHOLMIFYVBMYGL 
3P lsheadquartersstatesthatma 

3C SMVSGBEDDHOYGARDDYVAHXATHK 
4P NCHURI ANF0RCESAREBEINGM0 VE 

4C BUC0 JQBHNNSQLZC YQDCINGXKKZ 



Figure 20 

Let us now study certain plain-cipher relationships, in connection with our sliding alpha- 
bets. Consider H„ in line 3P, column 3 and H„ in line 4P, column 3; the plain-text letters are 
the same, the cipher equivalents, different. This difference in cipher equivalents for two 
nimil nr letters in the same column is occasioned solely 1 by the displacement of the cipher 
wheel in position 1, for the cipher wheels in positions 2 to 5 are m exactly the same setting 
in the two cases (since we are dealing with a known “V" message). The same is the case 
with the following pairs in the same lines: 



S„ (line 3P, column 14)= A. 
S„ (line 4P, column 14) =Z, 



Ep (line 3P, column 19) =V, 
Ep (line 4P, column 19)=C, 



Figure 21 

i ...im. the “860" break not to occur in the first four lines of the message. 

(23) 
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The question arises: Can we find by experiment with the various cipher wheels (or their 
equivalent sliding strips) which wheel will produce the cipher equivalents indicated above, 
under the conditions noted there? Consider the case of the two plain-text letters H in lines 
3P and 4P. The current corresponding to Hp in both cases entered the cipher wheels from 
the twenty-third contact of the RFS; its path through the cipher wheels in positions 5, 4, 3, 
and 2 is unknown, but whatever it is, it left the cipher wheel in position 2 at exactly the same 
contact in both cases, so that the contact on BS2 from which the current entered the cipher 
wheel in position 1 is the same in both cases. Now consider what happens at the LFS and the 
cipher wheel in position 1 (for both cases). The only reason the cipher equivalent for the 
first H is different from that for the second H is that the cipher wheel in position 1 has advanced 
one interval, and the current entering it from BS2 in the first instance emerges from the cipher 
wheel at V on the LFS, in the second instance, at C. 

We may take one of the sliding alphabets, say CWl, and place it in position 1, between 
the LFS and BS2 ; we may arbitrarily set CWld at A. We then locate V on the LFS and trace 
the path of the current from V, through NALl-MALl, to a contact on BS2, making note of 
the latter. We then advance CWl one interval and repeat the operation, beginning with C 
on the LFS. If the contact to which the second tracing leads (on BS2) is different from that 
to which it led in the first tracing, then obviously CWld cannot be the correct wheel for posi- 
tion 1 if the setting must be A. If CWld is correct it is not at the correct setting, and we 
must try another setting. If, however, the two paths lead to the same contact on BS2, then 
we have an indication that CWl may be the correct wheel for position 1. We say “may be" 
because, unless we can get some further corroboration, this coincidence of exits from CWl 
for both cases may simply be accidental and not causal. Therefore, we should try another 
case where the cipher letters are different for identical plain-text letters in the same two lines, 
but in another column, e.g., S p in column 14, yielding A, in the first encipherment, Z e in the 
second. We replace NALl-MALl in its A setting against LFS and BS2 and trace the path 
of the current from A> on LFS to BS2; slide the alphabet one interval forward, and trace the 
path from Z e on LFS to BS2. If again the current leads to the same contact for both encipher- 
ments, a corroboration is obtained for CWl at the setting and position indicated; if not, then 
we consider the first coincidence to be purely accidental, and proceed with further tests of the 
same kind. 

These tests would require much time if carried out exactly as indicated above, but we may 
very materially shorten the work by constructing certain synoptic tables which will, by inspec- 
tion, yield possibilities for correct cipher wheels and at the same time give the exact setting. 

19. First-interval data, cipher-text relationships. — Consider CWld set at A in position 1, 
and suppose the plain-text letter being enciphered is E. 

LFS T EGDNSXUPQYVHAMBKR^JLZIffOC 

MALI F BQMPLNRCHZEWA S G T J t) V K D I Y X U 

NALl A BCDEFGHIJKLMN A P Q R S T U V W X Y Z 

BS1 1 2 3 4 5 6 7 8 9 10 11 12 13 14 l! 16 17 18 19 20 21 22 23 24 25 26 

T 

[4 intervening wheels] 

RFS Y LVRZXCPF0IQA1IJBNSEKDGHTUW 



Figure 22 
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Th. ...rrmt leave. E on the RFS and paasaa through the wheels in positions 2, 3. 4, 5. The exaet 
L*TTt ta<^t it depends on the identity and relate position of the intervening whede. 

to position 13 on BS1 opposite 0 on NALl. Then to njntong 
cipher letter is F. After 26 letters have been enciphered, the wheels will be in the follows g 

position: 

tips TEGDNSxtpQYVHAMBKRFJLZlWOC 



LFS— 

MALI. 

NALl 



TEGDNSXUPQ**"* Me * inr 

U F B Q M P L It R C H Z E W_A SGTJOVKDIYX 

ZABCDEFGHIJKLMNOPQRSTUVWXY 

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 

[4 intervening wheelsl 

.ylvrzxcpfoiqamjbnsIkdghtuw 

Figure 23 



If in this position E is again eneiphered, the path traced by the current win again lead to ^position 
15 on BSl, because the four intervening wheels are m the same position as before. Since now, 
nosition 15 on BSl is opposite N on NALl, the resulting cipher letter is U. 

^ These results indicate that for CWld set at A, the cipher digraph FU corresponds to a plain- 
text repetition at an interval of 26 letters or interval 1 down a column. We obtained this 
digraph by considering the letter E and assuming that the identity and settings of the mterven- 
ingwheels were such as to cany the current to position 15 onBSl. For a different 
of* the intervening wheels some other plain-text letter would have led to position 15 and the 
same cipher di^aph would have resulted. Consequently, the identity of the P^ytext repe^ 
tion is not an essential element. For CWld at A, any plain-text repetition which leads to 

position 15 on BSl will correspond to the cipher digraph FU. .... , , , . a 

^ Had we assumed a position on BSl other than 15, a different cipher digraph would have 

resulted, e.g.: 

Table V 



Digraph 



Digraph 



Digraph 



For CWld at A, these 26 digraphs represent the only combinations which can correspond 
to plain-text repetitions at interval 1. Any digraph, not contained in the above set, cannot 

correspond to a plain-text repetition. . , ,. «„ 

This procedure can be carried out in detail for every wheel and every setting, yielding b 
digraphs for each case. The results can be set up in a series of tables (one for each wheel) which 
give the correct digraphs for each setting. It must be observed that these results will hold for 
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S”} 1 14 r°f bI I “ * e 8ame way to construct tables to correspond to any required 

interval. On the other hand, it is possible to obtain information about any desired interval 

Thrli ? L - T ° mu f 4rate ’ we know that ™ f <>r CWld at A is a correct possibSty 

The correct digraph beginning with U for CWld at Z is US. Consequently, FS is a correct 

wS I CW?d l fatrtit Y°FP ™ at A ' * ^ th0 k 8 f ae - Way ' “““ SP “ a P 08aibait y ^ interval 1 
when CWld is set at Y, FP is a correct digraph for interval 3 with CWld at A. The extension 

to any mtervid follows along the same lines. One must be careful in working with a reverse 

rr"rr b r t ? at i the ^ heei Se4ting8 progress in the normal order and not in the reveree 
order m for direct wheels These tables are given in Appendix II, basic cipheivtext sequences. 
Our chief mterest m these tables is to be able to pass from a known digraph to a set of possi- 

S tSfoU^^ tin ^ - , T ° “formation, the tables just described must be rearranged 
m thefoUowmgway: Instead of listing the digraphs corresponding to wheels and theTsTS 
J B ®Par a tely each digraph and the positions for which it is a possibility. This has b«m 
done for interval ! m Appendix III entitled “firet-interval data, cipher-text 

20. Apphcation of frst-mterval data to a known "V" message.— Let us now proceed**) make 

tbese tabl “ ^ try to find which cipher wheel is the one involved in the test messSe 
employed as an illustrative example on page 23. 

Take the first pair of equivalents: 



Hp (locus 3P-3)=V„ 
Hp ( locus 4P-3)=C e 
Figure 24 



Case 1 



^ pod. 




Wheel 


Setting 


Wheel 


Id 


K,L,Z 


6d 


3d 


V 


lr 


4d 


N 


2r 


5d 


A.B.P 


3r 





Figure 25 

Take another pair in the same lines of the message: 

S p (locus 3P-14)=AJ 
S p (locus 4F-14)=Z* j 

Figure 26 



Case 2 



* 3 ?* m ■ taMeA ' toeZ - ttm ‘ 16 fo ” d ** 




Wheel 


Setting 


Wheel 


Id 


z 


fid 


2d 
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6d 


3d 


c,s 


lr 


4d 


z 






Wheel 


Setting 


2r 


F 


5r 


U 


6r 
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The only indications common to cases 1 and 2 are CWld, set at Z and CW2r, set at F for 
line 3P. This means that if CWld, set at Z is correct for line 3P, then for the line IP, CW1 
must have been set at B; if, on the other hand, CW2r, set at F for line 3P is correct, then 
for the first line CW2 must have been set at D. Let us seek corroboration for one or the other 
of these two possibilities: 



D p (locus 1P-13 )=N e 
D p (locus 2P-13)=D„ 



Case 3 



Figure 28 



Refer to Appendix III and we find corroboration, for on table N, line D, CW2r at D is indicated 
as a possibility, whereas CWld set at B is not so indicated. 

For lines 2P and 3P, we should find CW2r set at E indicated for the following pairs: 



A p (locus 2P-fl)=X e 
Ap (locus 3P-9)=D„ 



Case 4 



E p (locus 2P-12)=D C 
Ep (locus 3P-12)=Y e 



Case 5 



A„ (locus 2P-26)=L e 
Ap (locus 3P-26)=K„ 



Case 6 



Figure 29 



Referring to Appendix III, it is found that CW2rset at E is indicated for the first two of the 
three caseB, but for the third case, CW2r set at F, not E, is indicated. This is not a contradiction, 
as will be explained later (p. 37), but it indicates that the “26” break in the lines occurs 
either at or before column 26. At any rate, there is now no question but that we have located 
the cipher wheel in position 1, together with its initial setting. 

All the foregoing was, however, predicated upon known facts: First the message was known 
to be a “V” message, and secondly, the plain text was available, so that identical letters in 
columns were known. What if these two facts were not known? 

In order to answer the questions proposed, a slight digression must be made. 

21. Statistical study of “V” messages. — Consider 1 a large amount of plain text to bo at 
hand. It is desired to determine the probability that two letters chosen at random from it 
shall be the same. The probability that one of the letters is an E is the normal frequency of E. 
The probability that both are E’s is the square of the normal frequency of E. Similarly, the 
chance that both are A’s is given by the square of the normal frequency of A. The sum of 
these two numbers gives the chance that the two letters are either both E or both A. The 
probability that both letters are the same, regardless of what particular plain-text letter they 
may happen to be, is the sum of the probabilities for each pair of identical letters and hence the 
sum of the squares of the normal frequencies of all the letters in the alphabet. The calculation 
on page 27 of Fart I shows this result to be 0.066. 

If, instead of plain text, one were given a monoalpliabetic substitution, the reasoning 
would still be the same. For the particular identity of the repetition was of no consequence 
in the reasoning. Moreover, two like cipher letters correspond to two like plain-text letters. 
Hence, the probability for a repetition of two cipher letters in a monoalphabetic substitution 
cipher is 0.066. 

1 The reader is advised to review the mathematical analysis contained in the discussion in Fart I (ppi 26-31). 
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Suppose now that a polyalplmbetic message is being studied. If the number of alphabets 
is known, it is possible to rewrite the message so as to break it up into its constituent mono- 
alphabets. If now the number of coincidences is tabulated in each monoalphabet, the situation 
is still the same. The total number of coincidences for all the alphabets should still correspond 
to a probability of 0.066. 

What happens if the number of alphabets is not known and the message is incorrectly 
written out? What kind of result will be obtained from a tabulation of the total number of 
coincidences in such a case? To answer this question completely, it will be assumed that the 
message under consideration is homogeneous, i.e., that each cipher letter has practically the 
same probability of appearance as every other one. Such an assumption is not a very great 
restriction since any fairly good cipher satisfies it. Even a polyalphabetic message with as 
few as six alphabets has a very flat frequency table. In such a case then, two like cipher letters 
in a column may represent any plain-text letters whatever. Select a particular cipher letter 
in a column, say 0,. The chances that any other letter in that column is 0 e are the same for 
every cipher letter, i.e., 1/26=0.038. This number is so much less than 0.066 that it should 
therefore be a simple matter statistically to determine the proper number of alphabets in a 
polyalphabetic message; for an incorrect assumption will yield only three-fifths as many 
coincidences as a correct one. The difference between the numbers 0.038 and 0.066 is significant 
enough to show up very plainly. 1 

22. BfisumS. — Summarizing what has been said up to this point in connection with "V” 
motions, it appears that every “V” cipher message can be determined provided only that it 
be at least 125 or 150 letters long. 1 In determining a message to be “V”, the identity and position 
of the first wheel are obtained as incidental items of information. Moreover, if the message is 
of sufficient length, the “650” break may be determined by the same analytical test, for that 
break defines the beginning of a new set of alphabets. The letters above the break will not yield 
the proper percentage of coincidences with the letters below it and if the message is long enough 
this property permits the break to be definitely located. This additional information gives 
the initial setting of the second control wheel and the initial setting of the second wheel. How- 
ever, it does not determine the identity of the second wheel except in very special cases. (For 
instance, it might happen that the first wheel in a particular message has been determined to be 
CW2d set at I. If the second wheel is found to begin at any letter between A and H, it must 
be CWl, because in the numerical key that letter would have to correspond to 1. Such cases 
are however very unusual.) 

The actual application of the test for “V” messages can now be explained by using a message 
whose motion and plain text are unknown. 

23. Application of statistical method to an unknown message (Serial No. 169). — To begin 
with, the message was written out in lines of 26 letters; only 12 lines were actually used in tne 
test, inasmuch as it was felt that this amount of text was quite sufficient. Twelve lines of text 
afford 11X26=286 pair of letters (at interval 1) that may be employed to find the cipher wheel — 
if a “ V ” motion is involved. According to theory, we should find 286 X 0.066 = 18.88, or approxi- 
mately 19, coincidences; hence, we should find one wheel in one position (all indications being 

1 The advantage of such a method of determining the number of alphabets involved in a polyalphabetic 
message over the commonly used one based upon repetitions is that a much smaller amount of text is necessary 
to obtain unquestionable results. It is possible in this way to determine the number of alphabets with only 
5 or 6 letters in eaoh alphabet, provided the number of alphabets is fairly large. An illustration of this and 
other applications will be found in S. Kullback, Statistical Methods in Cryptanalysis, Technical Publication, 
8ignal Intelligence Section, 1934. 

1 The total number of possible coincidences will be about 26X ! Ci=260; large enough to give fairly reliable 
results. 
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reduced to yiold the initial setting) indicated about 19 tines. Incorroct wheels should yield 
286X0.038=10.8, or approximately 11 indications. 

Serial No. 109 

INDICATOR : 000 3 EHHBE DMSCH 

1 2 2 4 5 U 7 S !> Ill 11 12 U 11 IS 10 17 W 19 20 21 22 22 24 25 2li 

1 fmeiwigcvcwgfqcdvgglnxvsvp 

2 BW0TCMKFJCESP0CHPF0LVM0JVA 

3 UYRPPSYIHIEQONWIMVPBGNJGZW 

4 ANCIEKLCBVGVTGDBRKFYBYQXKZ 

5 CXZVBOPMLUBLDQXIDWTEHZMFDU 

6 NGSGJLNCZRMLMXQISUIXMATRKD 

7 DCWLZOTHRGZPEYKYRXRSJPZHHQ 

8 ZWGEILAYVVEOZVQPUFEEUSSEAR 

9 ZWLGBXNSGBEYLEARUCMYJPXVRV 

10 HTXNTQSXHTZHMTHVYVAEZVZQSG 

11 UMAHBABWWOMQUDUNIYBSFXDWFP 

12 BVEDYYMOLZZJSYNUGTKRKXWSCC 

Figure 30 

A digraphic table was constructed of the pairs in adjacent lines; thus, for the first and 
second lines, FB, MW, E0, etc., for the second and third lines, BU, WY, OR, etc. 

Referring then to Appendix III, the indications for FB, MW, E0, etc., were distributed in 

the following manner: 

Table VI. — Table for the interval between Lncs 1 and 8 






Tho indications for BU, WY, OR, etc., were then distributed in the same table, but the 
positions indicated were reduced to initial settings. 

This process was continued for all the other pairs in the digraphic table, with this final result: 



Tabus VII 





Setting 
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B 
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D 


E 


F 


G 


H 


I 


J 


E 


L 


U 


N 


O 


P 


Q 


B 


S 


T 


tr 


V 


W 


E 


T 


Z 


CWld 


13 


12 


13 


15 


16 


24 


5 


7 


13 


10 


8 


10 


11 


9 


9 


16 


10 


8 


7 


10 


7 


6 


10 


11 


11 


10 


CWlr 


9 


16 


11 


9 


7 


18 


5 


12 


9 


8 


10 


12 


11 


10 


9 


10 


7 


7 


ii 


10 


8 


12 


14 


12 


15 


19 


CW2(1 


11 


15 


7 


10 


16 


9 


7 


14 


10 


14 


10 


9 


9 


10 


11 


8 


6 


8 


18 


9 


9 


8 


13 


6 


17 


8 


CW2r 


10 


13 


9 


14 


15 


19 


7 


15 


9 


7 


16 


12 


13 


15 


15 


16 


10 


10 


8 


4 


12 


5 


11 


6 


7 


16 


CW3d 


18 


13 


11 


9 


17 


5 


10 


9 


12 


9 


12 


9 


11 


9 


4 


11 


14 


6 


14 


14 


6 


11 


7 


13 


11 


13 
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6 


13 


8 


12 


13 


9 


9 


10 


5 


8 


14 


8 


11 


11 


11 


12 


8 


13 


9 


16 


10 


17 


8 


10 


17 


10 
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10 


13 
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10 
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11 


15 
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10 


13 


12 
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11 
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10 


14 
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7 


15 


20 
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11 


7 


9 


CW5r 


12 


19 


14 
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12 


13 


7 


15 



Note now the number of indications for CWld at F; it is 24 as against an average of 11.0 
for all other alphabets and positions. This means that not only are we dealing with a "V” 
message, but also the theoretical expectancy, 19, was really lower than the actual, 24, and 
that there are more repetitions in columns than was anticipated. 

As a check on this result the same process was carried out for interval 2, that is, tho letters 
of line 1 taken to form pairs with the letters in the same columns of line 3; those of line 2 witli 
those of line 4, etc. The total number of tabulations is 200, tho expected number of coin- 
cidences, 17. The actual number found for the setting F, CWld was 20. The percentage of 
coincidences for 286+260=546 digraphs for the setting F, CWld is therefore 8.1 percent instead 
of the theoretical 6.6 percent. • 

This result is really better than was anticipated. There can hardly be any doubt but 
that the right wheel and setting have been found. In less-fortunate cases, it may be necessary 
to tabulate and sum the data for several intervals before a conclusive result can be obtained. 

It should be observed here that the occurrence of tho “650” break in a message may 
cause some difficulty in the actual test. Any two lines which have the break between them 
will not furnish correct information. However, for small intervals the degree of error introduced 
is practically negligible. For example, in using interval 1 only one pair of lines at most will 
be incorrect, viz, those with the break between them; for interval 2 only two pairs, etc. In a 
message of at least six lines, the correct result will still be obtainable. 

Having found the correct setting for the cipher wheel in position 1, it follows that the 
letter D in message indicator DMSCH must equal F„; also F indicates that a wheel is in the 
direct position. 



When message Serial No. 169 was converted so as to remove the first cipher wheel from 
consideration, the following polyalphabetic message resulted: 



Figure 31. — Serial No. 169 converted 
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A study of the repetitions in the message and of the monoalpliabets down each column 
seemed to indicate that the "650” break occurred between lines 6 and 9. On using the ana- 
lytical test based on coincidences, it turned out that the break was either on line 7 or 8 and 
consequently the second letter of the message indicator must be either P or Q. The number 
of coincidences obtained when lines 7 and 8 were tested with the preceding lines were so nearly 
alike as to yield no definite information. Hence, in the message indicator DMSCH, M 0 =P or Q. 

Enough has been shown, it is thought, to indicate the procedure that was followed with 
unknown cipher messages to determine whether or not they were “V” messages; when encoun- 
tered, the value of the first letter of the message indicator, and whether its plain-text equiva- 
lent meant “direct” or “reversed” constituted important collateral information. 

After testing out the method on several unknown cipher messages and finding it to be 
efficacious, there seemed to be no point in spending further time with similar cipher messages 
with unknown plain text. After all, the cipher messages with know r n plain text would yield 
identical results in much shorter time, since identities of plain-text letters were indicated in 
the messages themselves when transcribed in lines of 26 letters. Consequently, all the plain- 
text messages were studied in connection with their cipher versions in order to shorten the 
time required for a complete solution. The possession of the 55 “known” cryptograms 
admittedly facilitated solution of the 110 “unknown.” Nevertheless, the solution was not 
made possible by, and would not in practice require possession of, plain-text messages with their 
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cryptographic equivalents. After several days’ work along these lines, many values and deter- 
minations were obtained from the procedure. 

24. Consideration of “W” messages. — The foregoing methods arc applicable to “V” 
motions. How about “W” motions? In a “W” motion the first wheel is either stationary 
or moves continuously; the second wheel moves every 20. The proper assumptions regarding 
the setting of the first wheel and its motion together with u correct assumption as to the second 
wheel makes the problem equivalent to the one just discussed. This procedure is a bit more 
complicated since it involves trials on two wheels and the number of necessary trials is there- 
fore greatly increased but otherwise the two problems are identical. There is no reason why 
such messages cannot be picked out by the above procedure. In the present test such a situa- 
tion did not arise because it was found possible to get sufficient information from “V” motions 
and “Z" motions (to be discussed) to obtain a complete solution of the problem. 

A particular idea in this connection should be emphasized. Suppose that in a given series 
of messages all of the “V” messages are found before a search is begun for “W” messages. 
In such a case, the number of trials mentioned above is considerably reduced, since in many 
of the “W” messages the first letter will be known. Any wheel assumed in the first position 
will then be entered in only one possible setting and the determination of “ W” messages will 
not be of much greater difficulty than the determination of “V” messages. 

Similarly, after all the “ff” messages have been found, a search can be made for “X” 
messages by assuming the first throe wheels, two of which will in some cases be known. 

A general solution can be arrived at by such a procedure. 

25. First interval data, plain-text relationships. — It has already been remarked that the 
messages most amenable to study are those whose motions arc either “V” or “Z”, but as yet 
nothing lias been said about the latter. In such a motion, if the message is written out in lines 
of 26, and letters down a column are considered, the fifth wheel is the only one which lias moved. 
This property may be put to use in a manner similar to that employed for “V” messages. 

Suppose that the wheel in position 5 is CW5d set at A, and that the plain-text letter being 
enciphered is E. The current passes from E on the RFS to Y on MAL5 thence to Y on NAL5. 

i 

RFS Y LVRZXCPFOIQAMJBNSEKDGHTUW 

MAL5 J ORXQEGISCFNAUZMHVYLKDBTWP 

NAL5 A BCDEFGHI JKLHNOPQRSTUVWXYZ 

1 

Figure 32 

From this point on, it goes through the remaining four wheels, finally emerging at some cipher 
letter 0 e . After the encipherment of 26 letters, CW5 has moved to setting Z. 

i 

RFS YLVRZXCPFOIQAMJBNSEKDGHTUW 

I 

MAL5 .... PJORXQEGISCFNAUZMHVYLKDBTW 



NAL5 ZABCDEFGHIJKLMNOPQRSTUVWXY 

4 



Figure 33 



If now the plain-text letter be Z, the current passes from Z on RFS to X on MAL5 thence to X on 
NAL5. The current is now at the same point on BS4 as the current for the preceding E. Since 
the other four wheels are in identically the same position as before the path traversed through 
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them by the current is the same in both cases and the same cipher letter will result. It thus 
follows that for CW5d set at A, the sequence EZ of plain-text letters at a distance of 26 will 
yield a cipher repetition. Similarly the sequence AB will yield a cipher repetition. Continuing 
in this way, it becomes possible to set up 26 digraphs which represent all the possibilities of 
plain-text pairs which shall yield like cipher letters when CW5d is in the fifth position at A. 
These digraphs are: 



Table VIII 



AB 


HM 


NP 


UE 


BD 


IC 


OT 


vx 


CQ 


JK 


PS 


wv 


DL 


KG 


QN 


XH 


EZ 


LA 


RW 


YF 


FR 


MU 


SJ 


ZY 


GI 




TO 





It is to be observed that it makes no difference just what the cipher letter is. That will depend 
on the first four wheels. The essential element is the fact that the cipher letter repeats. Any 
digraph not contained in the above 26 cannot yield a cipher repetition for CW5d set at A. 

Let tlds procedure be carried out for every wheel in every setting. A series of tables will 
then be obtained which will give the 26 digraphs corresponding to cipher repetitions for any 
particular wheel in any given setting. It is, of course, understood that this information will 
apply only to interval 1, i.o., to letters which are 26 apart in the plain text. 

For intervals other than 1, a similar procedure can be followed which will give the same type 
of information. Thus, one can construct tables which will give the correct digraphs for interval 2 
or interval 3. It is, however, possible to derive all of these further tables from the tables for 
interval 1. For if P,P 2 is a possibility for CWJd at Y and P,P 3 is a possibility for CWld at X, 
both being considered for interval 1, then PjPg is a possibility for CWld at Y for interval 2. 
Similarly if P t P g is a possibility for CWlr at A and P S P, for CWlr at B, both for interval 1 , then 
PjP# is a possibility for interval 2 on CWlr at A. 

It is possible in this way to combine digraphs for different intervals and get desired informa- 
tion about any interval whatever. All of this information can be conveniently combined into 
one set of tables (one for each wheel) which have bpen designated “Basic Plain-Text Sequences” 
(Appendix IV). To explain just how these tables are used, reference is made to the square for 
CWld. The letters down the outside of the box represent the settings of the wheel. If, for 
CWld, digraphs are desired for interval 1 at setting A, the first letter is read from line A, and the 
second is found by rending diagonally to the right, thus YT, HX, ZY, etc. For interval 2 at 
setting A, the first letter is again found on line A, the second is one removed along the diagonal, 
e.g., YC, HL, etc. In every case, the first letter is found on the line corresponding to the desired 
setting and the second letter is obtained by reading diagonally downward and to the right. The 
distance between the first and second letters of the digraph is the interval under consideration. 

Suppose the tables for interval 1 are inverted, i.e., suppose that the data above obtained is 
arranged with respect to the digraphs and not with respect to the wheels and their settings. 
This will be found in Appendix V, "First-Interval Data, Plain-Text Relationships”. Then the 
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tables will give information of a different character. Thus, under the letter B, it is found that 
the digraph BJ will yield a cipher repetition for each of the following settings: 




Figure 34 



The diagraph BN will yield a cipher repetition only for CW4r at 0 ; there is no other possibility. 
Similarly, any particular digraph is associated with a definite set of possibilities for the wheels 
«nd their settings. It is interesting to note that the wheels are so constructed that no plain- 
text doublet can ever yield a cipher doublet for interval 1. 

26. Application of plain-text relationships to messages with known plain text. — The 
application of the above information to the discovery of “Z” messages when the plain text is 
blown is very simple. Consider Serial No. 155. 

1 2 3 4 3 a 7 8 8 10 11 13 13 H 1* 10 17 18 19 20 21 22 23 24 25 28 

[JAPANESEANDCHINESESTILLHOL 

(KCMTZVUFELYTDQRRTNUXCSOFNE 

folNGLINESEXTENDINGFROMABOU 

ISWHXDVWIWGPHZOBRAHXCBYFKEH 

fTEIGHTKILOMETERSWESTOFNAZI 

*|DCBEffRBWOTEWffTQUUHCSTEPUWS 

jANGNORTHTOLIUHOPERIODNOSER 

4 |BGEIRTINXAPWVRYVPREFNBFSNM 

(IOUSFIGHTINGBUTSKIRMISHESB 

& |C0VJKFCLWE0L0QEGSVIRJCJMUT 

(ETWEENOUTPOSTSHAVETAKENPLA 

b ]YAYFWNJDYLKTYVESTQWORSAZQN 

ICEINLASTTffENTYFOURHOURSPER 

7 |gvtajjcDfsfcllettmzujfnfpy 

fl 0 D C E L E B R A T I 0 N 0 F R E P 0 R T E D V I 
* |D G B F E G K K 0 L G X L H V F S P T Q F X H T I X 

ICT0RYBYCHINESETR00PST00KPL 

9 1jsnqucbhhsnxzogzdruiaowoab 

lACEINSETTLEMENTONEVENINGOF 
0 |u X C S K W B M V ff J X 0 U T L I F Z J B J T Y G Y 
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2 8 4 8 0 7 8 0 10 11 12 13 14 15 IS 17 18 IB 20 

0URTHC0MMABUTLARGEC 

NSGKQPGORPKAUMCYJJR 

REDISPERSEDBYPOLICE 
SAKGDFHWSWLEJ GQDDUD 

RI0USDISTURBANCET00 

AEJG0PKMQLSGIWQQW0E 

ERI0DSHANGHAIISSH0W 

RLFMIRDWHUffSZILVHUA 



21 22 23 24 25 28 

R 0 W D S W 

V M B B S ff 

A N D N 0 S 

Z R N N C E 

K P L A C E 

K F R L C N 

I N G S 0 M 

E A J G A U 



E S I G N S 0 

N N U W D H A 

[0 R M A L C 0 

[Q D N Q F T H 

[A L K E L L Y 

N T D 0 Q K M 

EEHASKE 
K Z T A G I F 

H I S R E L A 

D L E Z Z C P 

[L 0 S E R P E 

B L M B U D Z 



FGRADUALLYRESUMI 

BELBRNGNTLUIKQCC 

NDITI0NSPERI0DAD 

RALELCVJCXDXMBIT 

INFORMSMETHATHEH 

AZQRDIMUBPXBYBOT 

DBYHISGOVERNMENT 
IVQWDHXUBEJ GAAUD 

TIONSffITHMEffEREN 

EAJURMUDffRUJAMDJ 

RIODOURRELATIONS 

GKHEFXABVKNHYQTF 



NGN 
F C S 

MIR 
G B Z 

A S B 
E P N 

WHY 
J J L 

0 T C 
M D P 

H A V 
E L R 

H E H 
B A F 



jEBEENCLOSEANDCORDIALANDHEH 
2 |B T Q U ff C P V C E » K L L H J 0 K L R If S E B A F 

(ASKEPTUSFULLYINFORMEDOFALL 
22 |D Z L M K V K Z V T R X V L B Z F H P U P U Z G C X 

jSTEPSHEHASTAKEN 

‘“[EHZLCPLZRXLOffQPGOP 

Figure 35 

On lines 1 and 2, the plain- text digraph El corresponds to the cipher repetition W in column 
6 and to the repetition RR in column 16. If the message is a “Z” message, then the only pos- 
sibilities for the last wheel are 



d 


r 


2G 


11 


21 


3B 


2ff 


6E 


3B 




3Y 




41 




6B 





Figure 36 
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Now consider the digraph GE which in column 18, lines 2 and 3 corresponds to the cipher 
repetition HH. The possibilities which it yields for the fifth wheel are 



d 


r 


1W 


2M 


IF 


3M 


2H 


4H 


2L 


4R 


3H 


4Z 


5W 


6B 




6J 




6T 




OX 



Figure 37 



But it must be remembered that in passing from line 1 to line 2, the setting of wheel 5 has 
changed in the reversed direction for a direct wheel and in the normal direction for a reversed 
wheel. To compare the second set of possibilities with the first, it is therefore necessary to 
compensate for this shift. Tho second set of possibilities will then become 



d 


r ! 


IX 


2L 


1G 


3L 


21 


4G 


2M 


4Q 


31 


4Y 


5X 


6A 




61 




6S 




6W 



Figure 38 



It is now found that only one entry is common to both sets, viz: CW2d at I. If the message 
is a “Z” message and the fifth wheel is 2d set at I, it should be possible to check this fact by 
using other cipher repetitions, for example, WW in column 12, lines 3—4. The plain-text digraph 
to which it corresponds is El and one would expect 2G to be listed as a possibility under this 
digraph. This is found to be the case. Similarly, the digraph TH in column 15, lines 5-6 is 
found to check. The necessary conclusion must then be that wc are dealing with a “Z” mes- 
sage whose fifth wheel is CW2d initially set at I. 

If a procedure such as has been outlined above does not result in one setting common to 
all the possibilities, the message cannot be a “Z” message. 1 

It is thus seen that if the plain text is known, the discovery of “Z” messages is a matter 
of relative simplicity and that each time such a message is found the identity and position of 
the fifth wheel are determined. But this is not all the information which is obtainable. The 
same test that has already been applied will give information about the first two wheels. 

1 If only one or two of several yield apparent contradictions, they may be the result of factors which are 
explained in what follows. 
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To see how this comes about we proceed as follows: Consider the cipher repetition BB on 
lines 20-21 in column 1. The corresponding plain-text digraph is LE. Since the fifth wheel 
is originally set at I and progresses in a reverse direction, it should have arrived at R for line 20. 
In other words, one of the possibilities which should appear under LE in the tables of interval 

1 is 2Rd. But, on reference to the tables, this entry is not found opposite LE, although 2Qd is 
found. The explanation for this appearance is not difficult. When a message is written out 
in lines of 26, the first column should be that one which corresponds to H on the first control 
wheel. This was not taken into account when the cipher message was set down, and it would 
consequently be expected that some of the columns would be out of place. That is exnctly 
what happens in this case. Column 1 really belongs on the right of column 26 and the digraph 
BB should appear on lines 19-20 rather than on lines 20-21 . For these lines, it would be expected 
that LE would correspond to 2Qd, as it actually does. (One must he careful not to overlook 
this fact in searching for “Z” messages.) 

The question now arises: “Does column 2 belong on the left or right?” In order to answer 
it, one must first find a cipher repetition in column 2 and check the corresponding plain-text 
digraph against the tables. When this is done with LL on lines 19-20, it is found that column 

2 really belongs to the right of column 1. 

The continuation of this reasoning introduces the use of other intervals than 1 since neither 
column 3 nor column 4 contains a cipher repetition at that interval. But this is not an essential 
difficulty. The use of interval 1 up to this point has been purely a matter of convenience; any 
other single interval or even any combination of intervals would have given the same results. 
It is found by this procedure that columns 3 and 4 also belong on the right leaving column 5 
as the H column of the final set-up. 

These results have two important consequences. In the first place, the letters ^ ^ ^ ^ 

at the beginning of the message must stand alone at the right end of line 1. They correspond 

N E S E * • • 

to a different setting from that indicated by the letters beginning „ „ • But it 

was these latter letters which corresponded to the setting 2Id. Consequently the message 
really begins with the fifth wheel 2d at J and not I. 

Secondly, since the fifth column corresponds to H on the left control wheel, it follows that 
the initial setting of the control wheel is L. Moreover, that initial setting gives the setting of 
the first cipher wheel. Tliis means that the indicator EQPRZ of Serial No. 155 is deciphered 
as L . . . J. 

This is not yet all the information which might be obtained from this message. Suppose 
it were long enough to contain the “650” break. Could not that break he located by the 
same procedure? To this end let us theoretically consider the line on which the break takes 
place. This break is due to a motion of two of the first four wheels which had been stationary 
throughout. The relative setting of all four as a unit is therefore changed and it is no longer 
correct to say that the first four wheels remain unchanged down a column. But that was the 
very property which permitted us to make use of the tables of plain-text relationships, and 
since it no longer holds, the line on which the break takes place will not check with those above it. 
It will check only with those belowr it. 

The application of this notion is quite simple. It is merely a matter of finding the first 
line which does not check with those above it. Serial No. 115, indicator R3PVQ, furnishes a 
good example of this procedure. 
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123456789 

ESTIMATES 

GQCBFHANW 

DREDTWENT 

BEGCLLLVC 

ESEFORCES 

DUPWDEKTD 

fYTHIENTYT 

DXHCPWXPM 

NDREDOFTH 

JVKKYPLVE 

? E D I N ff 0 0 S 
JRCEGXWGM 

CNESEFORC 

1SDKOBARZ 

iOUSANDJA 
■ IJHBYKEV 
3ABOUTSHA 
’KDHNDFRZ 

SNVESSELS 

1BZDTLADJ 

)NKIANGWA 

IKZANQKJL 

'LEPROGRE 

'FOXYAYL 

IUNDREDCH 

FHNPGGWYi 

ESTERNENI 

QffIZRSTF' 

ENCHEDVEI 

DJLPZKOBI 

ERDAYHADI 

NRRYNCXOI 

KIANGWAN] 

VEUE0STM1 

ENTINTEN! 

UVFSSHGU1 

EXECUTEA1 

AWJKSAWQC 

TSOUTHWEf 

WMHVYYBMC 



Serial No. 115 

) 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 

3ITUATI0NTWELVEHUN 
IJIPDNACUHIIKLPLAV 
fYONEFEBRUARYJAPAN 
30FQG0ZABX0RB0UEMF 
JASHOREINCLUDINGNA 
• VUUDMOBTWUJPDOMFX 
‘WOTHOUSANDTHREEHU 
IKRMUKSYRPJTFLHGLK 
IESETWENTYFIVEHUND 
IFMFSSDJANNLWPCLPY 
UNGAREAOPPOSINGCH 
IBAVTIGPCCVZYPLBC 
ESABOUTFIFTYFIVET 
APHONMGMKMXTJJRTD 
PANESEFORCESMOVIN 
LIGFZVXYAJCOLGJEZ 
NGHAIAREAFIFTYSEV 
LZLWJWRGUCYKNDHMN 
INJAPANESEADVANCE 
ITFFZVCTCKCYAKOIK 
NYESTERDAYVERYLIT 
ZKMIOALFOXFZPTOTT 
SSMADEANDATTWELVE 
LANZGXAZPQOFLERSI 
INESESTILLHOLDING 
KLMUHABJLORJPDAHH 
DOFTOWNCHINESEENT 
YJYXZIYSTPAQGHTUG 
STOFRAILWAYANDYES 
OCHIDSHHQBCNCLPCS 
ONLYAFEWOUTPOSTSI 
HJDGEKIEEINEXWGVA 
BATTLEAREAITISEVI 
MEPLGZRLOIFGWSAAG 
TIONOFJAPANESEIST 
MYEFYHEDUKNPCTXFX 

nenvelopingmoveme 

QWCZCPFHZXKKBUPPB 

STTOCUTOFFCHINESE 

GFLTYVLENKVMMAEEZ 
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21 

22 

23 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 

[INCHAPEINORTHSTATIONAREAOF 

\AVUPQASGDLVMJLODDITHOYUSPU 

[CHAPE ISHELLEDALLYESTERDAYA 
\GNEOQVAZPXFXLQILDFRWOMWQQG 

fNDLASTNIGHTBUTNOADVANCEOFJ 

\UNIEPBRNZWQMUKYDCSMAAYFSER 

Etc. 

Figure 39 



The message is found to be a “Z” message with the first wheel originally set at I and CW6r 
at V in the last place. If it is written out as in figure 39, it will be found that line 14 checks 
with those below it but not with those above it. Consequently line 14 represents I on the sec- 
ond control wheel. On counting back to line 1, it is found that the second control wheel was 
originally at V. This gives the setting V for the second cipher wheel and shows that the indi- 
cator RSPVQ is deciphered as IV. .V . 

Returning to Serial No. 155, it is found that every line of the message checks with every 
other, and the break does not appear anywhere in the message. As u result it would seem thut 
the initial position of the second control wheel is unobtainable, and in general, this would be 
true. It happens though that the particular message under consideration proves to be an excep- 
tion because of its length. Since the last line checks with all the others above it, it must corre- 
spond to a setting of the control wheel other tlmn I. Suppose this setting were any other letter 
than J or K. Then it is found by counting back that some line in the message would represent 
I and would have to contain the break. Consequently, the last line must be either J or K and 
the initial setting of the second control wheel must be either H or G. This reduction to two 
possibilities is as far as one may go with the method given above. 

It may be useful to summarize what has been said up to this point about “Z” messages 
with known plain text. In the first place, it can be determined by the use of the tables of plain- 
text relationships whether or not the message is in a “Z” motion. This procedure results in a 
knowledge of the identity and original position of the fifth wheel. Secondly, the original posi- 
tion of the first control wheel can be determined and if the message is long enough, that of the 
second control wheel can also be found. The information about the control wheels gives the 
original settings of the corresponding cipher wheels. 

27. Application of plain-text relationships to messages with unknown plain text. — The 
next element to consider is the study of messages for which no plain text is available. For 
them, some statistical method must be devised which will indicate the correct result by a study 
of frequencies. Suppose that the machine is set for a “Z” motion with wheel 4 direct at S in 
the last position. If the plain-text letter E is hit 26 times in succession a series of cipher letters 
will result. If the next 26 plain-text letters are all C, the second cipher line will be identical 
with the first because, according to the table, an E and a C at a distance of 26 will yield the 
same cipher letter. 

Suppose now that the first line had been all E’s but the second line ordinary plain text. 
Then in any column where the cipher letters are identical the second letter must represent C. 
If the cipher letters in the column are not the same, the second letter cannot be C. Hence, 
the number of coincidences is the same as the relative frequency of C in the second line. 

If the first 26 letters had been plain text the number of E’s on the top line would have 
corresponded to the normal frequency of E. The chances of finding on these two lines a 
cipher coincidence which represents EC are given by the product of the normal frequencies of 
E and C. The chances of finding a cipher coincidence whose first plain-text equivalent shall 
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be A arc represented by the product of the normal frequencies of A and N since, according to 
the table, AN is one of the digraphs to be sought for at interval 1 . 

It now follows that the chance for the appearance of any cipher repetition regardless of 
what plain-text digraph it may represent, is obtained by summing the results for all 26 correct 
digraphs. The calculations are given below: 



AN= 0.072X 0.076= 0.0055 


JM= 0.002 X0.025= 0.0001 


SB= 


0.058X0.012=0.0007 


BZ= .012X 


.001= .0000 


KU= .004 X 


.030= .0001 


TL= 


.090 X 


.036= .0032 


CS= .034 X 


.058= .0020 


LJ= .036 X 


.002= .0001 


UE= 


.030 X 


.126= .0038 


DK= .040 X 


.004= .0002 


MW= .025 X 


.014= .0004 


VA= 


.013 X 


.072= .0009 


EC— .126X 


.034= .0043 


NQ= .076X 


.003= .0002 


WT= 


.014X 


.090= .0013 


FY= .030 X 


.021= .0006 


0V= .074 X 


.013= .0010 


X0= 


.005 X 


.074= .0004 


GF= .018X 


.030= .0005 


PR= .027 X 


.083= .0022 


YG= 


.021 X 


.018= .0004 


HP= .033 X 
IH= .076 X 


.027= .0009 
.033= .0025 


QI= .003 X 
RX= .083 X 


.076= .0002 
.005= .0004 


ZD= 


.001 X 


.040= .0000 



Figure 40 

The expected theoretical number of cipher coincidences at interval 1 is 0.032 of the total number 
of tabulations. The average incorrect result is %*, since it may be assumed that all cipher 
digraphs have an equal probability of appearance. Hence, the average incorrect result is 0.038 
against a correct result of 0.032. 

In considering cipher repetitions on the first and third lines, it is necessary to use interval 2. 
Similarly, in comparing line 1 with other lines of the message, new intervals must be introduced. 
The correct results for CW4d at S (as calculated above) are given here for a few intervals with 
the corresponding incorrect result in each case. 



These results seem to indicate that the incorrect result is often larger than the correct 
one and that even in those cases where the correct one is greater, the difference is not very 
appreciable. In other words, a mere count of cipher repetitions cannot give any information 
as to whether or not a message is in a “Z” motion. 

However, it is to be expected that the distribution of the repetitions will vary with the 
probability. For example, if the correct result for two lines is 0.045, it is natural to expect 
more cipher repetitions between them than between two lines whose probability is 0.030. It 
seems reasonable then to multiply the number of repetitions between two lines by the corre- 
sponding probability and to sum the results for all possible pairs of lines. Such a procedure 
was followed in several tests and the following results were obtained. (Tn most cases the 
ncorreet settings were picked at random. The correct one is the first one listed.) 

Serial No. 139 (10 lines) 

lCd lDd 4Sd 

17771 17596 17903 

Serial No. 131 (10 lines beginning as in cipher message) 

4Sd lBd lEd 

14519 14597 14735 

Serial No. 131 (10 lines beginning at proper position) 

[This test assumes a knowledge of first control wheel] 

4Sd lAd lBd lCd lEd 

14108 13098 13941 13488 13929 



Table IX 



Interval 


Correct 

result 


Incorrect 

result 


Interval 


Correct 

result 


luLurreot 

result 


Inlervul 


('OTTPC'I 

result 


Iruxirrect 

result 


2 


0. 043 


0.038 


7 


0.048 


0.038 


12 


0.034 


0.038 


3 


.034 


.038 


8 


.043 


.038 


13 


.034 


.038 


4 


.038 


.038 


9 


.037 


.038 


14 


.043 


.038 


5 


. 031 


. 038 


10 


.048 


.038 


15 


.033 


.033 


6 


.038 


.038 


11 


.045 


.038 


16 


.013 


.038 



Should one wish to study repetitions between line 2 and the lines below it, it would be necessary 
to consider wheel 4 as being set at R. The results obtained for the first 15 intervals of this 
setting are: 

Table X 



Interval 


Correct 

result 


Incorrect 

result 


1 

1 

! Interval 


('or reel 
result 


Incorrect 

result 


Interval 


Correct 

result 


Incorrect 

result 


i 


a 042 


0.038 


6 


0.036 


0.038 


11 


0.041 


0.038 


2 


. 033 


.038 


7 


.032 


.038 


12 


.030 


.038 


3 


.031 


.038 


8 


.045 


.038 


13 


.033 


.038 


4 


. 042 


.038 


9 


.032 


.038 


14 


.036 


.038 


5 


.013 


.038 


10 


.040 


.038 


15 


.030 


.038 



Serial No. 131 (17 lines beginning at proper position) 

[ This test assumed that there was no break in the first 17 lines ] 

4Sd lEd 
58491 58192 



Figure 41 



The results obtained above do not seem very satisfactory. In several cases, an incorrect 
setting gave a larger total than the correct setting. Even in those coses where the correct setting 
gave a larger result than the few incorrect positions used, the percentage difference was very 
small. Consider the final test, where 17 lines were used. The difference between the correct 



and incorrect settings 



. 299 

1S 58491 



which is one-half of 1 percent . 



It appears that one cannot deter- 



mine “Z” motions by comparing the cipher repetitions between pairs of lines only. One must 
use more than just two lines. 

It is not difficult to see how this can be done. It has already been shown that for a given 
wheel in a given position a cipher repetition between two lines, at any interval whatever, can 
represent only 1 of 26 possible digraphic combinations. To put it differently, if the plain-text 
equivalent of the first of the two cipher letters is arbitrarily assigned, the equivalent of the second 
is completely determined. In exactly the same way then, if three or more like cipher letters 
appear down any one column, and a plain-text equivalent is assigned to any one of them, the 
equivalents of the others will be fixed. Naturally, these equivalents will vary with the different 
w-heels and their different settings. 
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To illustrate this notion, consider Serial No. 155. If this message is written out in lines of 
26, the cipher letter D is found to appear five times in column 1 , the first appearance corresponding 
to the setting H on the correct wheel, 2 direct. The positions of the other letters D correspond 
to the settings, C, X, R, 0. These letters H, C, X, R, 0 give the intervals between the repeated 
cipher letters, viz, 5, 5, 6, 3. Tf we assume the first D to be represented by A, then the second must 
be B, because the tables give AB as a correct digraph for interval 5 when wheel 2d is set at H. 
If the second D is supposed to be B, then the third must be W because BW is a correct digraph for 
interval 5 and for wheel 2d set at C. The fourth and fifth letters in this same way become G 
and J, so that finally if the first of the set is A, the entire set is ABWGJ. This same procedure can 
be carried out by assigning each of the 26 letters in turn to the first of the cipher letters D and 
as a result, the following sets of 5 letters arc obtained: 

KIYMNHBTLOZQXVWGSFJDERACPU 
LDVCJ ONIPZYHMKWTFSQARUBXEG 
JGBAOXLEUZVMHNSFRDITYCWPQK 
PUZIFKVHTJ OYNRCAXMSWDLGEBQ 
MQHXWYSARKCOBFNDVTZUGEJILP 

93 167 79 211 196 136 194 397 268 81 142 156 150 205 190 250 189 243 110 246 288 30S 117 267 203 81 

Figure 42 

The number at the foot of each column represents the sum of the relative frequencies of 
the letters in it. The highest of these sums, 397, which comes from the set TIEHA is found on 
comparison with the known plain text of the message to be the correct set of letters. 

Given any set of repeated cipher letters in a column, it is possible in this way to relate to it 
26 sets of plain-text letters, provided, of course, that the entire set of cipher letters is contained 
within one block of 650. 

This notion can be extended still further. Suppose a fairly long message is being studied 
and that the original positions of the control wheels are known. (Such an assumption is not 
unreasonable, since this information is obtainable from a study of “V” messages.) In such a 
message one can relate cipher letters in one block of 650 to letters in other blocks by using the 
properties of the “703” cycle, in which as has already been shown a shift of one letter arises in 
both of the fixed sequences. 

To illustrate the procedure, consider Serial No. 115, on which the proper breaks have been 



indicated. 
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1 2 3 4 5 fi 7 8 ft 10 11 12 13 14 IS 10 17 18 19 20 21 22 23 21 ’j 28 

UU BEVDMYUTFSOZZDQPOCWQGYAKUJ TV 
VT ZVHSPPLWYUXVVWJBUYTJXBKLBG S W 
WS QYGYUYINFUJPLSOWGDZFMVQBPS RX 
XR JAVJTIYUGLKTQAKGPSVJOPSHYF Q Y 
YQ ALKIOCVPCGIPZVXYAROANUULBL PZ 
ZP FLDBXSDUGPYWVQUVJPKKMYLRLR OA 
AO YSUZYTQGUSMJJ NB 

Figure 43 

In column 1 of block 1, the letter G i3 found repeated at interval 7. For wheel 0 reversed, 
set at V, this pair can represent one of 26 possible digraphs, obtainable from the tables for that 
wheel. These digraphs are 
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Figure 44 

Let us recall just how these digraphs were obtained. Suppose that the first of the cipher 
letters G had represented the plain-text letter E. Then with wheel 6 reversed, set at V, the 
current would have traversed the following path: 

1 

RFS YLVRZXCPFOIQAMJBNSEKDGHTUff 

NAL6 VUTSRQPONMLKJIHGFEDCBAZYXW 

MALGr NDRTHLBIJZEQXSOWFPUKGCYVMA 

[4 intervening wheels] 

LFS TEGDNSXUPQYVHAMBKRFJLZIWO. C 

Jr 

Figure 45 

Just what path is traversed tlirough the first four wheels is of no concern since those wheels 
remain fixed down the column. 



L 
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To see what plain-text letter the second G represents, it is first necessary to shift the last 
wheel to the setting C, 7 places removed from V. Then in this position the strips appear as 
follows: 

I 

RFS YLVRZXCPFOIQAMJBNSEKDGHTUff 

NAL6 CBAZYXWVUTSRQPONMLKJIHGFED 

/ ! 

MAL6r KGCYVMANDRTHLBIJZEQXSOWFPU 

Jr 

[4 intervening wheels] 

lfs teIdnsxupqyvhaubkrfjlzivoc 

I 

Figure 46 

The last four wheels are in identically the same position as before. Consequently, if the current 
emerged at G, it must have followed the same path as before and must have come from G on 
CW6r. G on NAL6 is opposite H on RFS. It is thus seen that the second of the cipher letters 
represents H. This result checks with the results as shown in the table. 

Suppose now that the letters in the second block are being considered. Since 703 leaves a 
remainder of 1 on being divided by 26, it is necessary to relate the letters of column 1 in the first 
block to those of column 2 in the second block. Moreover, as a result of the shift in the fixed 
sequences, the letter G of block 1 must be related to D in block 2. The second column of block 2 
is found to contain the letter D three times. The second of the letters G having been supposed 
to be on line C, the first D will be on line K. For this line, the setting of the strips becomes 

i 

RFS YLVRZXCPFOIQAMJBNSEKDGHTUff 

NAL6 KJIHGFEDCBAZYXWVUTSRQPONML 

l 1 

MALGr QXSOWFPUKGCYVMANDRTHLBIJZE 

i 

[4 Intervening wheels] 

LFS TEGDNSXU P Q YVHAMBKRFJLZIffOC 

i 

Figure 47 

In this Betting the first four wheels are in the same position as before, but have been shifted 
one place as a unit relative to the LFS. The path of the current to D on the LFS from MALGr 
will be the path previously followed to G on LFS from MAL6r but will be shifted down one place 
along its entire length. This means that the current to D on LFS must have come from S on 
MALGr and therefore from E on RFS. D, on line C must therefore represent E p . 

The equivalents of the remaining D s ’s in column 2 block 2 can now be obtained without 
difficulty. 

71830 — 35 4 
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If the cipher letter N appeared in column 3 of block 3, a similar procedure to the one de- 
scribed above would determine the corresponding plain-text letters. Here again a shift of the 
fixed sequences must be introduced in the same way as before. This method of relating letters 
in each of two or three blocks of 650 makes it possible to study larger sets of letters than would 
otherwise be obtained. For example, in Serial No. 115, more than 25 sets of such letters were 
found where each set contained at least 5 letters. In a message of but one block, the occur- 
rence of even four or five such sets is rare. 

For each assumption as to the identity and original setting of the fifth wheel, 26 combina- 
tions of plain-text letters can be assigned to each set. For, by the above procedure, after any 
one of the cipher letters in such a set has been arbitrarily assigned a plain-text value, the equiv- 
alents of all the others can be determined. To illustrate, consider the cipher letters G, D, and 
N in col umns 16, 17, and 18 of blocks 1, 2, and 3, respectively. The total number of occurrences 
of these letters is 7 and the sets of plain-text letters obtained on the assumption that the fifth 
wheel is CW6r at V ore given below: 

B GSPAHXHOZQTVEKYNDFIUJLBCRW 
C EFMTCJIXAURKDLSGOQWBVNPZYH 



N JZXAVCDHIOMLEBQPRKUFSWGNTO 
Q BXOTWMRNZGEJICHLQDVUKYASPF 
R CIUYJZSXHKBQPTVAGRWDLMEFON 



M H F M R Z Q L X K G 0 W A Y S J I C V E T P N U D B 
Q FBXOTWMRNZGEJICHLQDVUKYASP 

502 343 427 408 

Figuee 48. — Columns 16, 17, 18 — GDN 

Of these sets, the combination ATATYRO represents the greatest total frequency, viz, 502. On 
reference to the known plain text, this set is found to be the correct set. 

It now appears that for a correct assumption of the fifth wheel, the proper letters will be 
found from a set of 26 possibilities by a summation of frequencies. That the correct letters 
correspond to the greatest sum is substantiated by the fact that only one exception was found 
in more than ten tests of this nature. Hence, it may be assumed that in each group of 26 setB 
the col um n giving the greatest sum is the only one to be considered. Suppose such a procedure 
were carried out for every set containing at least 5 letters, not only for the correct setting but 
also for all incorrect settings. How would the grand .total of the frequencies of all the sets in 
the correct case compare with an incorrect case? If the former should be the greatest of all 
or among the greatest, one would then have a method of testing unknown messages for "Z” 
motions. Moreover, there is no question about the fact that such will be the case for mes- 
sages which are sufficiently long. Unfortunately, this is not true for a message of the size of 
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Serial No. 115. A series of tests carried out on the latter message gave negative results os 
follows: 

Table X3 



Cipher letten 


Columns 


Correct 

letting 


Inocrrect 

letting 


GDN 


16 


502 


560 


ZXV 


17 


417 


471 


HAH 


19 


383 


415 


FJL 


26 


468 


436 


EGD 


25 


455 


383 


KRF 


7 


210 


414 


JLZ 


19 


308 


505 






2,743 


3,184 



Unless one can obtain longer messages, the methods herein discussed will not permit the dis- 
covery of “Z” messages whose plain text is unknown. Some other plan of attack will have 
to be devised for use in such cases. 







REF ID : A70315 



Appendix I 



INSTRUCTIONS 



TEST OF HCM 

April 1, 1932. 

f 

1. There are four sets of variables in the HCM which must be adjusted before a message 
can be enciphered or deciphered, namely; 

(а) Code-wheel arrangement 

(б) Code-wheel lineup 

(c) Control-wheel setting 

(d) Ratchet action 

The code-wheel wirings and end wirings are semipermanent, but remain unchanged for 
long periods of time. They will remain fixed for this test. 

2. The method by which the above listed variable adjustments are set is as follows: 

(а) Each message contains an external indicator which shows, by reference to a printed 
cipher or list for the date in question, the initial key and hence the set-up of the HCM. It 
also shows which one of the six cipher wheels is to be omitted from consideration for that day. 
Ordinarily, the initial key would change daily, but for this test it will remain the same through- 
out. 

(б) In each message, a message indicator follows the external indicator. With the HCM 
set up as determined by the external indicator, the message indicator (5 letters) is enciphered 
on the HCM. This encipherment produces the message key. By the use of a simple code, 
the message key determines an entire new set-up for the HCM. The set-up thus obtained is made 
and the encipherment or decipherment of the message proper now begins. 

The message indicator, and therefore the message key, changes with every message. 

(c) The actual set-up of the four variables is derived from the key as follows: 

(I) Code-wheel arrangement . — If the key were YSRIP, for example, the order of the wheels 
would be 5, 4, 3, 1, 2. A table in the cipher shows whether each wheel is to be used in the 
direct or reverse position. If the table were 



Direct ABCDEFGHIJKLM 

Reversed NOPQRSTUVWXYZ 

the code-wheel arrangement would be 5R, 4R, 3R, ID, 2R, since Y, S, R, and P in the table show 
that the wheels are to be used in the reversed position, and I in table shows that its wheel is to 
be used in the direct position. The wheels are then placed in the HCM in that order and 
position, from left to right. 

(2) Code-wheel line-up . — The key itself is used as the line-up setting of the code wheels. 
Thus, wheel 5R, which is now installed as the left-hand wheel, is set with the Y (on the wheel 
periphery) against the bench mark; wheel 4R is set with S against the bench mark, etc. 

(3) Controlwheel setting . — The first two letters of the key are used as the control-wheel 
setting. Thus, the left-hand control wheel is set at Y; the right-hand wheel at S. 

(49) 
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(4) Ratchet action . — The arrangement of the code wheels has already been derived as 5R, 
4R, 3R, ID, 2R. The first two digits, 5 and 4, are applied to a table in the cipher to find the 
ratchet-action setting. Such a table would be 




The setting of the ratchet action from the table is ACY. 
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SBtUM 

A NVTXBZCQHAOYDSJIKUFPWGLREM 

B HEUKITYAliCVNXLVRP JQODZFGBS 

0 GPRWEVMBTHSUZOFQLYCNIJDKXA 

D QFOGHBKEAXPICJYZVTSffLNRUMD 

E J CDAKRGUUQVTLVIHEXOZSFPBNY 

F T N M R F D B P Y 0 E Z H W A G U C I X J Q K S V L 

G SBFJNKQVCGIAOMDPTWULYRXHZE 

H KJLSRYHTDWMCBNQEOPZVFUAIGX 

1 LZXFVAENOBTKSYGCQIHJPMWDUR 

J IUJHHGSCKERXVDTYWALQBONPFZ 

E PLABDXTRGFUHNEVOMZYKCSQJIff 

L ZMKNUEFDJPASGHCBIVRTXYLWOQ 

M BRSPGJNLQMXDATKWHFEUVZOCYI 

N FXQDLSZYBUNMEROAJGPHICTVWK 

O UYNZXIVKPSBGFCMZDQAWTEHORJ 

F VSIUWHRQXKDJTBLNYMOEGACFLP 

Q XWPOAFYURNLEKlSVBCGDMTtJZQH 

R OQCMJVPFSZGRWXHKTDNBELIY A U 

S Y T B L H Q J X I D F 0 U A R E N S K G Z W V M P C 

T EKZAYLUWNJCPMFGSXRDIOHBQTV 

U RIMVZPOSLTQBJDXUFNWCAKYEHG 

V WBHIQCXZEYKLNUPJSOTMRVGADF 

W KAWYTUIGVRZSPQLXCEBFHDMNJ 0 

Z UOVEPVDHFIXQYZUTGKJANBSLCR 

T CHGQONAJWUYVIPEDRLMSKXZTFB 

Z ADYCSMLOPVHVQGNFZBXRUIEJKT 
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Appendix III 

FIRST-INTERVAL DATA— CIPHER-TEXT RELATIONSHIPS 

Table A 

A 

H ID 2T 3Z 5V 5T 1Y 2M 3F 40 4R 4Y 

V IT 1H 1A 30 3B 4H 5S 5L 5J 5E6L1Z2T2W3Y4B4T6T 

7 21 31 4V 4N 4D 6X 6F 6P 6T 1A 1J 2L 2P 3L 5A 

Q 1U4T4K5M5B6K1M1P1Q1W2N2Y4H5L5N5S 
P 5K2A2ZOTJ4P4Z5P6R 
U IV IB 2G 2E 4U 4P IB 2S 3S 4W 5E OT 

Z 2Y 2W 20 4C 5A 3R 3S 4G 6L 

S 1M 3F 61 2C 2E 2S 3U 3X 4E 6X 

N 2S 5P 5F 6Y 6ff 6H 6A 2U 3C 3V 3Z 51 5T 5Z 6V 6Z 

D 1S2N2J2F3Y3V3Q3E4E1E1H426C6F 
G 1R 1L IF 2V 2R 3G 40 6Z 6Q 6G 3K 41 5W 61 

E IX 1J II 3T 4L 5Z 5Y 5N 6N IT 2H 31 4K 5J 6M 

T 10 2H 5R 51 6R IF 4M 4S 6P 

O 1N1C2B2AAI102X4A4D5Q5V6A6G 

0 1Y2M4X4R4F4B6S1G1V3B3E3H4L4V5K 5Y 60 6W 

W 4J 6J 2G 4Q 5D 6H 

1 2C 3U 3N 5G 6B IN 1R 1U 2D 2R 3T 

Z 1Z 2U 3S 3C 4Z 5Q 5D 5C 60 6D IX 2F 5U 6J 6N 

L 1W 1G 2X 2P 3K 4Q 5W 5H 21 20 2Q 30 5N 6Y 

J IE 2K 5U 6M 6C 6fi 

F 2D 3X 3W 3L 3D 41 4G 6U ID 1C IS 2V 3W 4C 5C 5F 5G 5X 6S 

B 3J3A4S4Z1K2K334F4N4U6E6U 
E IQ IP 2Q 2L 3P 3M 4Y 50 6E 3A 3G 3M 5B 50 5R M 

B IK 2Z 3R 3H 4W 5X 6V 1L 2B 3D 3P 4J 5H 6B 

M 411 



Underlined type denotes wheels in reversed positions. 
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Underlined type denotes wheels in reversed positions. 
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Underlined type denotes wheels in reversed positions. 
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Underlined type denotes wheels In reversed positions. 
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Underlined type denotes wheels in reversed positions. 
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Tabu P 

A 21 3C 3B 3Q 31 4N 4L 6Z 1Y IX IN 22 3R 4X 5X 5A 5B 5S 6N 
H 303F4X4E1F2F3L4A4I4P6Z6P 

V IV 1U 2V 2Q 3U 3R 4D 5T 6J 3V 3B 3H 5W 5J 5M 6F 

Y IP 2E 3W 3M 4B 5C 6A 1G 2ff 3Y 3K 4E 5C 6ff 

Q 4R 

P 

TT II 2Y 3E 5A 5Y IT 2H 3A 4J 4M 4T 

X 1Y 1M IF 3T 3G 4M 5X 5Q 50 5J 6Q lU 20 2R 3T 4W 40 6Q 

S 2N 3N 4A 4S 41 6C 6K 6U 6Y IV IE 2G 2K 3G 5V 

N 1Z 4Y 4P 5R 5G 6P 1H 1L IK 1R 21 2T 4C 5G J5H 5JJ 

D 5P2V2U3I4K425K6I1 
G 1A 1G 2L 2J 4Z 4U Iff 2E 3E 4R 5Z 6Y 

E 2D 2B 2T 4H 5F 3M 3N 4B 6G 

T 1R3K6N2X2Z2N3P3S4Z6S 
0 2X 5U 5K 6D 6B 6M 6F 2P 3X 32 3U 5D 50 5U 62 6U 

0 IX 2S 20 2K 3D 3A 3V 3J 4J 1Z 1C 4T 6X 6A 

W Iff IQ IK 2A 2ff 3L 4T 6E 6V 6L 3F 4D 5R 6D 

1 1C 10 IN 3Y 4Q 5E 5D 5S 6S 10 2C 3D 4F 5E 6H 

Z IT 2M 5W 5N 6ff 1A 41 4N OC 

L IS 1H 2G 2F ID 1£ 2S 4V 4Y 5L 52 6V 6B 

J ID 2R 4C 4ff 4K 4G 6X IB 12 3ff 3Z 3C 4G 42 5F 5T W 6R 

F 40 60 2B 4L 5Y 6C 

E 2H 3Z 3S 5L 6G !I lM IP 2Y 2M 30 

K IE 2Z 3X 3H 4E 5V 51 5H 6T 61 IS 2A 5P 6E 

B IB 1L 2C 2U 3P 4V 5B 5M 2D 2J 2L « 51 SI 

M 1J 2P 5Z 6R 6H 6L 

Underlined type denotes wheels In reversed positions. 
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Tabu U 

A IK 2Q 5A 6S 61 6K 

H 2J3D3C3R3J404M6AlXlfflM2E324I555Z5A5S6M 

V 3P3G4Y4FlEgS3g424a426Y62 

Y Iff IV 2ff 2R 3V 3S 4E 5U 6K 3U 3^ 3£ 5Y 51 5£. 6£ 

Q IQ 2F 3X 3N 4C 5D 6B IF 2£ 3X 3J 4£> 5B 6V 

P 4S 
U 

X 1 J 2Z 3F 5B 5Z IS 2G 3Z 41 4L 4S 

S 1Z IN 1G 3U 3H 4N 5Y 5R 5P 5K 6R 1J 2JI 2S 3§ 4V 61J 

X 20 30 4B 4T 4J 6D 6L 6V 6Z 11J1D 2£ 2J 3F 5y 

D 1A 4Z 4Q 5S 5H 6Q i£ lg 1J i2 SH 4E §F 5g SM 

Q 5Q22gl3H4J415J6t 
E IB 1H2U2K4A4V1V2D3D425Y6S 

T 2E 2C 2U 41 5G 3L 3M 4£ §£ 

O IS 3L 60 2W 2Y 2M 30 3R ^Y 

0 2Y5V5L6E6C6N6G223H3E315£5I!5I6E§1 
W 1Y2T2P2L3E3B3W3K4K1Y1S^§2§Z 

1 IX 1R 1L 2B 2X 3M 4U 6F 6ff 6M 3E 4C §2 6C 

Z ID IP 10 3Z 4R 5F 5E 5T 6T IS ig 3C 4g 22 g2 

L 1U 2N 5X 50 6X 13 45 4M M 

I 1T1I2H2G1C1I2R4U4X5S5P6JJ64 
F lE2S4D4X4L4H6YlAi£3V3Y3g4F4E5E5SgI62 
B 4P 6P gS 4S 5S §5 

K 2I3A3T5M6H1H1L102X2L3N 
B IF 2A 3Y 31 4F 5W 5J 51 6U 6J 1R 2Z 50 §2 §H . 

M 1C 111 2D 2V 3Q 4ff 5C 5N g2 SI 21 §H SS 

Underlined type denotes wheels in reversed positions. 
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Underlined type denotes wheels in reversed positions. Underlined type denotes wheels in reversed positions. 
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Tabu G 

A 1J 2X4I4C4Q4M6D1V1K3Q3T3W4A4K5Z5N6D6L 
H 4U 6U 2V 4F 5S 6ff 
V 2N3F3Y5R6M1C1G1J2S2G3J 
T IK 2F 3D 3N 4K 5B 50 5N 6Z 60 l|l 2IJ §£ 6Y §C 
Q 1H 1R 21 2A 3V 4B 5H 5S 2X 2D 2£ 3D 5C 6N 
P IP 2V 5F 6X 6N 6F 

U 20 2W 31 5H 50 4T 4R 6F IS 1R 1H 2K 5L 4R 5R 5U 5V 5M 6H 

Z3U3L4D4K1Z2Z3F4U4C4T6T62 
S IB 1A 2B 3W 3A 3X 4J 5Z 6P 3P 3V 3B 59 5D 5G 6Z 

BT IV 2K 3C 3S 4H 51 6G 1A 23 3S 3g 4Y 5ff §9 

D 4X 
G 

E 10 2E 3K 5G 5E IN 2B 3U 4D 4G 4N 

T IE IS 1L 3Z 3M 4S 5D 5W 5U 5P 6W 13 21 2J. 3N 19 41 61 

0 2T 3T 4G 4Y 40 61 6Q 6A 6E IP rj[ 2A 2E 3£ 5P 

0 IF 4E 4V 5X 5M 6V IB IF iE 1L 2£ 2N 4W 5A 5B KI 

W 5V2P 20 3C4E405E6G 

1 1G1M2R2P4F4A192Y3Y4L5T6S 
Z 2J2H2Z4N5L3G3H4V6A 

L IX 3Q 6T 2R 2T 2H 3J 3M 4T6M 
J 2D5A5Q6J 6H6S6L2J3RjgtM5XgI506K60 
F ID 2Y 2U 2Q 3J 3G 3B 3P 4P II 1W 4N 6R 6U 

B 1C Iff IQ 2G 2C 3R 4Z 6K 6B 6R 32 4X 5L 6X 

K II 1U IT 3E 4W 5K 5J 5Y 6Y H 2ff 3C 42 §Y 6B 

B 1Z 2S 50 5T 6C 1U 4B 4H 6E 

M 1Y1N2M2L1X1D2M4P^5F5K6P62 

Underlined type denotes wheels in reversed positi ons . 



Tablb E 

A 1Z 10 2N 2M Iff 1C 2L 4Q 5J 60 6U 

H 1K2Y4J 4D4R4N6E1U1J3P3S3V4Z4J5Y5M6C6K 

V 4V 6V 23 4E 5g 6X 

Y 20 3G 3Z 5S 6N IB IF H 2E 2F 3H 

Q 1L 2G 3E 30 4L 5C 5P 50 6A 6P 1L 2T 51 6X 6B 

P II IS 2J . 2B 3W 4C 51 5T 2S 2C 2E gC 5B 6M 

U IQ 2ff 5G 6Y 60 §1 

X 2P2X3J3I3P4U4S6G131R1G2J3K435Q5T5U5L6G 
S 3V3M4E4LlY2Y3g4I4g4I6S6I 
N 1C IB 2C 3X 3B 3Y 4K 5A 6Q 30 3U 3A SE 5C 5F 6Y 

D Iff 2L 3D 3T 41 5J 6H 1Z 2P 3R 3D 4X 5V 6P 

a 4Y 

E 

T IP 2F 3L 5H 5F 1M M 32 4C 4F 4M 

0 IF IT 1M 3A 3N 4T 5E 5X 5V5Q 6X IN 2H 2K 3M 4P 4H 6H 

0 2U3U4H4Z4P6J6R6B6F101X2Z2D3Z50 

W 1G 4F 4ff 5Y 5N 6W 1A IS ID IK 2B 2M 4V 5Z M 5G 

1 5ff 2fi 2N 3B 4D4N 5D 6F 

Z 1H IN 2S 2Q 4G 4B IP gX 3X _4K 5S 6R 

L 2K 21 2A 40 5M 3F3G 4U 6Z 

J 1Y 3R 6U 23 2S 2G 31 3L 4S 6L 

F 2E 5B 5R 6K 61 6T 6M 21 5Q 5J 5N 5W 5H 5N 6J 6N 

B IE 2Z 2V 2R 3K 3H 3C 3Q 4Q IS IV 4M 6Q 6T 

K ID IX 1R 2H 2D 3S 4A 6L 6C 6S 3Y 4ff 5K 6W 

B 1J IV 1U 3F. 4X 5L 5K 5Z 6Z 1H 2V 3W 4Y 5X 6A 

M 1A 2T 5D 5U 6D IT 4A 4G 6D 

Underlined type denotes wheels in reversed positions. 
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TabuT 

A IB 2U 5E 5V 6E lg 4Z 4F 6C 
H lAlP 20 2Nl£lg2{C4N4a5D5I^6£ 

V lL2Z4K4E4S 40 6FlTlI3Q2R3H4X415SSIe§5gsI 

T 4W 6W 2T 4D 5Q 6U 

Q 2P 3H 3A 5T 60 1A IE 1H 2fl 2g 3g 

P 1M 2H 3F 3P 4M 5D 5Q 5P 6 B 6 Q lg 2§ 5|J 6 j| 64 

U 1J IT 2K 2C 3X 4D 5J 5U 2V 2B 2D 3B 5A 6L 

X 1R 2X 5H 6Z 6P 6Q 

S 2Q 2Y 3K 3J 3Q 4V 4T 6H IP la IF 21 3j[ 4E SE SS 5Z K£ 6F 

N 3N3W4F4M1X2X3D4§4A^I6S6H 
D ID 1C 2D 3Y 3C 3Z 4L 5B 6R 3g 3T 3Z 52 5B 5g 6|; 

Q 1X2M3E3U4J5K6I1Y203Q3C4W5U60 
B 4Z 
T 

O 1Q2G3M5I 5GlL2S3S4g4E42 

0 1G 1U IN 3B 30 4U 5F 5Y 5W 5R 6Y 1|J 2fi 22 & £2 6Q 

W 2V 3V 41 4A 4Q 6K 6S 6C 6G IN 1W 2Y 2C 3Y 

1 1H 4G 4X 5Z 50 6X 1Z ID 1C L£ 2A 2L 451 5Y 5g 5F 

Z5X2N2M3A4C4MEjC§E 

L II 10 2T 2R 4H 4C 10 2V 3E 4£ 5R 02 
I 2L2J2B4P5N3E3F4T6Y 
F lZ3S6V2PgR2F3H3K4R6K 
B 2F5C5S6L6J6U6N2H3E 3J 3BJ 5J[ 5g §M 6£ §M 
K IF 2A 2ff 2S 3L 31 3D 3R 4R 2& 1SZ 4L §P §§ 

B IE 1Y IS 21 2E 3T 4B 6M 6D 6T 35 4X 52 6X 

M IK Iff IV 3G 4Y 5M 5L 5A 6A 12 22 3V 4X 51 6Z 

Underlined type denotes wheels in ravened positions. 
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Table C 

A 1L IX 1W 3H 4Z5N 5M 5B 6B IF 2T 3U 4ff 5V 6Y 

H 1C 2V 5F 5W 6F 1R 4Y ^ 6B 

V IB IQ 2P 20 1U 1A 2J 4M 4P 5C 5H 6U 6S 

T 1M 2A 4L 4F 4T 4P 6G IS 1H 3N 3fi 3T 4X 4H 5ff 5K 6A 61 

Q 4X 6X 2S 4C 5P 6T 

P 2Q 31 3B 5U 6P 1Z ID 1G 2P 2D 3F 

U IN 21 3G 3Q 4N 5E 5R 5Q 6C 6R 1J 2R 5G 6V 6Z 

X IK 1U 2L 2D 3Y 4E 5K 5V 2U 2A 2C 3A 5Z 6K 

S IS 2Y 51 6A 6Q 6C 

N 2R 2Z 3L 3K 3R 4ff 4U 61 10 IP IE 2H 31 40 50 5R 5S 5J 6E 

D3X304G4N1W2W3C4R4Z4G6Q6G 

G IE ID 2E 3Z 3D 3A 4M 5C 6S 3M 3S 3Y 5N 5A 5D 6W 

E 1Y 2N 3F 3V 4K 5L 6J IX 2N 3P 3B 4V 5T 6N 

T 4A 

O 

0 1R2H3N5J5H1K2Y3R4A4D4K 

W 1H IV 10 3C 3P 4V 5G 5Z 5X 5S 6Z 1L 2F 21 3K 4N 4F 6F 

1 2W3W4J 4B4R6L6T6D6H1M1V2X2B3X5M 

Z II 4H 4Y 5A 5P 6Y 1Y 1C IB II 2Z 2K 4T 5X 5Y 5E 
L 5Y2M2L3Z4B4L5B6D 
J 1J IP 2U 2S 41 4D IN 2V 3V 41 5Q 6P 

F 2M 2K 2C 4Q 50 3D 3E 4S 6X 

B 1A 3T 6W 20 2Q 2E 3G 3J 4Q 6J 

E 2G 5D 5T 6M 6K 6V 60 2G 30 3H 3L 5U 5F 5L 6H 6L 

B 1G 2B 2X 2T 3H 3J 3E 3S 4S lg IT 4K 60 6R 

M IF 1Z IT 2J 2F 3U 4C 6N 6E 6U 3W 4U 51 6U 

Underlined type denotes wheels in reversed positions. 
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Table O 

A 1G 1A 1U 2K 2G 3V 4D 60 6F 6V 3V 4T 5H 6T 

H 1M 1Y IX 31 4A 50 5N 5C 6C IE 2S 3T 4V 5U 6X 

V ID 2W 5G 5X 6G IQ 4X 4D 6A 

T 1C 1R 2Q 2P IT 1Z 21 4L 40 5B 5G 6L 6R 

Q IN 2B 4M 4G 4U 4Q 6H 1R 1G 3P 3S 4W 4G 5V 5J 6Z 6H 

P 4Y 6Y 2R 4B 50 6S 

U 2R 3J 3C 5V 6Q 1Y 1C IF 20 2C 3E 

X 10 2J 3H 3R 40 5F 5S 5R 6S 6D II 2Q 5F 6U 6Y 

S 1L IV 2M 2E 3Z 4F 5L 5ff 2T 2Z 2B 3Z 5Y 6J 

Iff IT 2Z 5J 6B 6R 6B 

D 2S 2A 3M 3L 3S 4X 4V 6J IN 10 ID 2G 3H 4N 5N 5Q 5R 51 6D 

G 3Y3P4H401V2V3B4Q4Y4F6P6F 
E IF IE 2F 3A 3E 3B 4N 5D 6T 3L 3R 3X 5M 5Z 5C 6V 

T 1Z 20 3G 3ff 4L 5M 6K 1W 2M 30 3A 4U 5S 6M 

0 4B 

0 

W IS 21 30 5K 51 LJ 2X 3Q 4Z 4C 4J 

1 II 1W IP 3D 3Q 4W 5H 5A 5Y 5T 6A IK 2E 2H 3J 4M 4E 6E 

Z 2X 3X 4K 4C 4S 6M 6U 6E 61 1L 1U 2W 2A 3W 5L 

L 1J 41 4Z 5B 5Q 6Z IX IB 1A 1H 2Y 2J 4S 5W 5X 5D 

J 5Z2L2K3Y4AM5A6C 
P IK IQ 2V 2T 4J 4E 1M 2U 3U 5P 60 

R 2N 2L 2D 4R 5P 3C 3D 6W 4R 
K 1B3U6X2N2P2D3F3I4P6I 
B 2H 5E 5U 6N 6L 6ff 6P 2F 3N 3G 3K 5T 5E 5K 6G 6K 

M 1H 2C 2Y 2U 3N 3K 3F 3T 4T IP IS 4J 6N 6Q 

Underlined type denotes wheels in reversed positions. 



79 



Table W 

A II 2D 2Z 2V 30 3L 3G 3U 4U 10 1R 41 6M 6P 

H 1H IB IV 2L 2H 3ff 4E 6P 6G 6ff 3U 4S 5G 6S 

V IN 1Z 1Y 3J 4B 5P 50 5D 6D ID 2R 3S 4U 5T 6W 

T IE 2X 5H 5Y 6H IP 4ff 4C 6Z 

Q ID IS 2R 2Q IS 2H 4K 4N 5A 5F 6K 6Q 

P 10 2C4N4H4V4R6I1Q1F3L 30 3R4V4F51J5I6Y6G 

U 4Z 6Z 2Q 4A 5N 6R 

X 2S 3K 3D 5W 6R IX IB IE 2N 2B 3D 

S IP 2K 31 3S 4P 5G 5T 5S 6T 6E 1H 2P 5E 6T 6X 

K 111 IV 2N 2F 3A 4G 5M 5X 2S 2Y 2A 3Y 5X 61 

D 1U 2A 5K 6C 6S 6A 

G 2T 2B 3N 3M 3T 4Y 4ff 6K 1M IN 1C 2F 3G 4H 5M 5P 5fl 5H 6C 

E 3Z 3Q 41 4P 1U 2U 3A 4P 4X 4E 60 6E 

T 1G IF 2G 3B 3F 3C 40 5E 6U 3K 3Q 3W 5L 5Y 5B 6U 

0 1A 2P 3H 3X 4M 5N 6L IV 2L 3N 3Z 4T 5R 6L 

0 4C 
W 

1 IT 2J 3P 5L 5J II 2ff 3P 4Y 4B 41 

Z 1J IX IQ 3E 3R 4X 51 5B 5Z 5U 6B 1J 2D 2G 31 4L 4D 6D 

L 2Y 3Y 4L 4D 4T 6N 6V 6F 6J IK IT 2V 2Z 3V 5K 

J 1K4J 4A5C5R6A1W1A1Z1G2X2I4R5V5W5C 
P5A2K2J3X4Z4J5Z6B 
B 1L 1R 2W 2U 4K 4F 1L 2T 3T 4G 50 6N 
K 202U2E4S5Q3C3B4Q6V 
B 1C3V6Y2M202C3E3H406H 
M 21 5F 5V 60 6M 6X 6Q 2E 3M 3F 3J 5S 5D 5J 6F 6J 
Underlined type denotes wheels in reversed positions. 
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Tablh I Table Z 
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4S 


52 


6K 










O 


11 


1H 


21 


3D 


3H 


3E 


4Q 


5G 


6W 


31 


30 


32 


5J 


5W 


5Z 


22 






w 


4D 
































W 


1C 


2R 


3J 


3Z 


40 


5P 


6N 


IT 


2J 


3L 


3X 


4R 


5P 


22 










I 


































I 


4E 
















' " 




















z 


1U 


2K 


3Q 


5M 


5K 


1H 


2V 


30 


4X 4A 4H 
















z 






































L 


IK 


1Y 


1R 


3F 


3S 


4Y 


5J 


5C 


5A 5V 6C 


11 


2C 


2F 


3H 


4K 




6C 


L 


IV 


2L 


3R 


5N 


5L 


12 


2U 


3N 


4ff 


4Z 


42 
















J 


2Z 


3Z 


4M 


4E 


4U 


60 


6W 


6G 


6K 1J IS 


2U 


21 


3U 


5J 








J 


1L 


1Z 


IS 


3G 


3T 


4Z 


5K 


5D 


5B 


5W 


6D 


1H 


2B 


2E 


22 


4J 


4B 


22 


P 


1L 


4K 


4B 


5D 


5S 


6B 


IV 


1Z 


1Y IF 2W 


2H 


42 


5U 


5V 


5B 






F 


2A 


3A 


4N 


4F 


4V 


6P 


6X 


6H 


6L 


11 


IB 


2T 


2X 


3T 


51 








R 


5B 


u 


21 


3W 


4Y 


41 


5Y 


§A 


















R 


1M 


4L 


4C 


5E 


5T 


6C 


12 


12 


12 


IE 


2V 


2G 


4P 


■ 5T 


22 


5A 






K 


1U 


is 


2X 


2V 


4L 


4G 


IK 


2S 


3S 4F §N 


6M 














E 


5C 


21 


2H 


3V 


4X 


4H 


a 


6Z 






















B 


2P 


2N 


2F 


4T 


5R 


3A 


3B 


4P 


6U 
















B 


IN 


IT 


2Y 


2W 


4M 


4H 


12 


2R 


3R 


4E 


5M 


6L 














M 


ID 


3W 


6Z 


2L 


2N 


2B 


3D 


3G 


4N 6G 
















M 


2Q 


20 


2G 


4U 


5S 


3Z 


3A 


40 


6T 




















Underlined 


type 


! denotes 


wheels ir 


i reversed 


. positions. 
















Underlined 


type 


denotes wheels in 


reversed 


positions 
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Table L 



A 


2R 


2P 


2H 


4V 


5T 


3Y 


3Z 


4N 


6S 




















H 


IF 


3Y 


6B 


2J 


2L 


2Z 


3B 


3E 


4L 


6E 


















V 


2L 


51 


5Y 


6R 


6P 


6A 


6T 


2B 


3J 


3C 


3G 


5P 


5A 


5G 


6C 


6G 






T 


1L 


2G 


2C 


2Y 


3R 


30 


3J 


3X 


4X 


1L 


10 


4F 


6J 


6M 










Q 


IK 


IE 


1Y 


20 


2K 


3Z 


4H 


6S 


6J 


6Z 


3R 


4P 


5D 


6P 










P 


IQ 


1C 


IB 


3M 


4E 


5S 


5R 


5G 


6G 


1A 


20 


3P 


4R 


50 


6T 








U 


1H 


2A 


5K 


5B 


6K 


1M 


4T 


4Z 


6V 




















X 


1G 


IV 


2U 


2T 


IE 


IV 


2E 


4H 


4K 


5X 


5C 


6H 


6N 












s 


1R 


2F 


4Q 


4K 


4Y 


41) 


6L 


IN 


1C 


31 


3L 


30 


4S 


4C 


5R 


5F 


6V 


6D 


N 


4C 


6C 


2N 


4X 


5K 


60 


























D 


2V 


3N 


3G 


5Z 


6U 


1U 


1Y 


IB 


2K 


2Y 


3A 
















a 


IS 


2N 


3L 


3V 


4S 


5J 


5ff 


5V 


6ff 


6H 


IE 


2H 


5B 


so 


6U 








E 


IP 


1Z 


2Q 


21 


3D 


4J 


5P 


5A 


2P 


2V 


2X 


3V 


5U 


6F 










T 


IX 


2D 


5N 


6F 


6V 


6X 


























c 


2V 


2E 


3Q 


3P 


3ff 


4B 


4Z 


6N 


LJ 


IK 


1Z 


2C 


3D 


4J 


5J 


5M 


5N 


5E 6Z 


o 


3C 


3T 


4L 


4S 


1R 


2R 


3X 


4M 


4U 


4B 


6L 


6B 














w 


1J 


11 


2J 


3E 


31 


3F 


4R 


5H 


6X 


3H 


3N 


3T 


51 


5V 


5Y 


6R 






I 


ID 


2S 


3K 


3A 


4P 


5Q 


60 


IS 


21 


3K 


3ff 


40 


50 


61 










z 

L 


4F 




































J 


IV 


2U 


3S 


50 


511 


IF 


2T 


3M 


4V 


4Y 


4F 
















F 


1H 


1A 


IT 


3H 


3U 


4A 


5L 


5E 


5C 


5X 


6E 


IS 


2A 


2D 


3F 


41 


4A 


6A 


R 


2B 


3B 


40 


4G 


4W 


60 


6Y 


61 


61 


1H 


15 


2S 


2V 


3S 


5H 








K 


IN 


4M 


4D 


5F 


5U 


6D 


IT 


ix 


IV 


15 


2U 


2F 


40 


5S 


5T 


5Z 






B 


5D 


2H 


2G 


3U 


4V 


4G 


5W 


6Y 






















M 


10 


1U 


2Z 


2X 


4N 


41 


11 


20 


30 


4D 


5L 


6K 















Underlined type denotes wheels in reversed positions. 



Table J 



A 


IP 


IV 


2A 


2Y 


40 


4J 


1H 


2P 


3P 


iS 


5K 


6J 












H 


2S 


20 


21 


4V 


5U 


3X 


3Y 


4M 


6R 


















V 


1G 


3Z 


6C 


21 


2K 


2Y 


3A 


3D 


4K 


6D 
















T 


2M 


5J 


5Z 


6S 


6Q 


6B 


6U 


2A 


31 


3B 


3F 


50 


5Z 


5F 


6B 


6F 




Q 


1M 


2H 


2D 


2Z 


3S 


3P 


3K 


3Y 


4Y 


15 


IN 


4E 


61 


6L 








P 


1L 


IF 


1Z 


2P 


2L 


3A 


41 


6T 


6K 


6A 


30 


iQ 


5C 


60 








U 


1R 


ID 


1C 


3N 


4F 


5T 


5S 


5H 


6H 


15 


2N 


30 


io 


5E 


6S 






X 


11 


2B 


5L 


5C 


6L 


15 




4Y 


6V 


















s 


1H 


IV 


2V 


2U 


12 


12 


2D 


4G 


4J 


5V 


5B 


6G 


6M 










N 


IS 


2G 


4R 


4L 


4Z 


4V 


6U 


1M 


IB 


3H 


3? 


3N 


4R 


4B 


50 


5E 6U 


6C 


D 


4D 


6D 


2M 


iS 


5J 


6N 
























a 


2V 


30 


3H 


5A 


6V 


IT 


IX 


1A 


2J 


2X 


3Z 














E 


IT 


20 


311 


3V 


4T 


5K 


5X 


5V 


6X 


61 


12 


ZL 


5A 


SE 


6T 






T 


10 


1A 


2R 


2J 


3E 


4K 


50 


5B 


20 


2U 


2V 


3U 


5T 


6E 








0 


1Y 


2E 


50 


6G 


6V 


6V 
























o 


2X 


•3R 


30 


2F 


3X 


4C 


4A 


60 


11 


LJ 


IX 


2B 


3C 


41 


51 


5L 5i| 


5D 6Y 


w 


3D 


3U 


4M 


4T 


19 


20 


3V 


4L 


4T 


4A 


6K 


6A 












I 


IK 


1J 


2K 


3F 


3J 


3G 


4S 


51 


6Y 


3G 


3H 


3S 


5H 


5U 


5X 


so 




z 


IE 


2T 


3L 


3B 


40 


5R 


6P 


15 


2H 


3J 


3V 


iE 


5N 


6H 








L 

J 


4G 


































F 


IX 


2N 


3T 


5P 


5N 


IE 


2S 


3L 


4U 


4X 


4E 














R 


IN 


IB 


1U 


31 


3V 


4B 


511 


5F 


5D 


5Y 


6F 


IE 


2Z 


2C 


3E 


4H4Z 


6Z 


K 


2C 


3C 


4P 


4H 


4X 


6R 


6Z 


6J 


6N 


IS 


IE 


2R 


2V 


3R 


5G 






B 


10 


4N 


4E 


5G 


5V 


6E 


IS 


IV 


IV 


IS 


2T 


2E 


4N 


5R 


5S 


5Y 




M 


5E 


2G 


2F 


3T 


4V 


iE 


5V 


6X 





















Underlined type denotes wheels In reversed positions.. 
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Table F Table R 



A 


5F 


2F 


2E 


3S 


4U 


4E 


5U 


6W 






















A 


IQ 


4P 


4G 


51 


5X 


6G 


12 


12 


IT 


1A 


2R 


2C 


4L 


5P 52 


5ff 






H 


IQ 


1W 


2B 


2Z 


4P 


4K 


1G 


20 


30 


4B 


5J 


61 














H 


5G 


2E 


2D 


3R 


4T 


4D 


5T 


6V 




















V 


2T 


2R 


2J 


4X 


5V 


3W 


3X 


4L 


§2 




















V 


1R 


IX 


2C 


2A 


4Q 


4L 


IF 


2N 


3N 


4A 


51 


6H 












Y 


1H 


3A 


6D 


2H 


2J 


2X 


3Z 


3C 


4J 


6C 


















Y 


2U 


2S 


2K 


4Y 


5ff 


3V 


3W 


4K 


6P 


















a 


2N 


5K 


5A 


6T 


6R 


6C 


6V 


2Z 


3H 


3A 


3E 


5N 


5Y 


5E 


6A 


6E 






Q 


11 


3B 


6E 


2G 


21 


2ff 


3Y 


3B 


41 


6B 
















p 


IN 


21 


2E 


2A 


3T 


3Q 


3L 


3Z 


4Z 


1J 


1M 


4D 


6H 


6K 










P 


20 


5L 


5B 


6U 


6S 


6D 


6W 


2Y 


3G 


3Z 


3D 


511 


5X 


5D 6Z 


6D 






u 


111 


1G 


1A 


2Q 


211 


3B 


4J 


6U 


6L 


6B 


3P 


4N 


5B 


6N 










U 


10 


2J 


2F 


2B 


3U 


3R 


3M 


3A 


4A 


11 


1L 


4C 


6G 


6J 








Z 


IS 


IE 


ID 


30 


4G 


5U 


5T 


51 


61 


1Y 


2U 


3N 


4P 


50 


6R 








z 


IN 


1H 


IB 


2R 


2N 


3C 


4K 


6V 


611 


6C 


30 


4M 


5A 


6M 








a 


1J 


2C 


5M 


5D 


611 


IK 


4R 


4X 


6U 




















s 


IT 


IF 


IE 


3P 


4H 


5V 


5U 


5J 


6J 


IX 


2L 


3M 


40 


5N 62 








N 


11 


IX 


2ff 


2V 


IN 


IT 


2C 


4F 


41 


5V 


5A 


6F 


6L 












X 


IK 


2D 


5N 


5E 


6N 


LJ 


42 


4W 


6T 


















D 


IT 


2H 


4S 


411 


4A 


4ff 


6N 


1L 


1A 


3G 


3J 


3M 


4Q 


4k 


5P 


5D 


6T 


6B 


D 


1J 


1Y 


2X 


2ff 


lM 


IS 


2B 


4E 


4H 


52 


5Z 


6E 


6K 










a 


4E 


6E 


2L 


4V 


51 


6M 


























a 


1U 


21 


4T 


4N 


4B 


4X 


60 


IK 


1Z 


3F 


31 


3L 


4P 


4Z 50 


5C 


6S 


6A 


E 


2X 


3P 


31 


5B 


6V 


IS 


1W 


1Z 


21 


2W 


3Y 
















E 


4F' 


6F 


2K 


42 


5H 


6L 
























T 


1U 


2P 


3N 


3X 


4U 


5L 


5Y 


5X 


6Y 


6J 


1C 


2K 


5Z 


60 


6S 








T 


2Y 


3Q 


3J 


5C 


6X 


1R 


IV 


1Y 


2H 


2V 


3X 














0 


1R 


IB 


2S 


2K 


3F 


4L 


5R 


5C 


2N 


2T 


2V 


3T 


5S 


6D 










C 


IV 


2Q 


30 


3Y 


4V 


511 


5Z 


5Y 


6Z 


6K 


IB 


2J 


5Y 


6N 6R 








o 


1Z 


2F 


5P 


6H 


6X 


6V 






















• 




O 


IS 


1C 


2T 


2L 


3G 


411 


5S 


5D 


2M 


2S 


22 


3S 


5R 


6C 








w 


2Y 


2G 


3S 


3R 


3Y 


4D 


4B 


6P 


1H 


11 


ix 


2A 


3B 


4H 


5H 


5K 


5L 


5C 6X : 

1 


W 


1A 


2G 


5Q 


61 


6Y 


6U 
























I 


3E 


3V 


4N 


4U 


IP 


2P 


3V 


4K 


4S 


4Z 


6J 


6Z 












1 


I 


2Z 


3T 


3S 


3H 


3Z 


4E 


4C 


6Q 


1G 


1H 


IS 


2Z 


3A 


4G 5G 


5J 


5K 


5B 6ff 


z 


1L 


IK 


2L 


3G 


3K 


3H 


4T 


5J 


6Z 


3F 


3L 


3R 


5G 


5T 


5W 


6P 






Z 


3F 


3V 


40 


4V 


10 


20 


3U 


4J 


4R 


4Y 


61 


6Y 










L 


IF 


2U 


3M 


3C 


4R 


5S 


6Q 


IQ 


2G 


31 


3U 


40 


5M 


6G 










L 


111 


1L 


211 


2H 


3L 


31 


4U 


5K 


6A 


3E 


3K 


32 


5F 


5S 5V 


60 






J 


4H 




































J 


1G 


2 V 


3N 


3D 


4S 


5T 


6R 


IP 


2F 


3H 


3T 


4N 


5L 


6F 








P 




































I 


P 


41 


































R 


1Y 


20 


3U 


5Q 


50 


ID 


2R 


3K 


4T 


4W 


4D 
















R 




































E 


10 


1C 


IV 


3J 


3W 


4C 


5N 


5G 


5E 


5Z 


6G 


IE 


2Y 


2B 


3D 


4G 


4Y 


6Y j 

i 


K 


1Z 


2P 


3V 


5R 


5P 


1C 


22 


3J 


4S 


4V 


4C 














B 


2D 


3D 


4Q 


41 


4Y 


6S 


6A 


6K 


60 


IF 


10 


2Q 


2U 


32 


5F 






i 


B 


IP 


ID 


1W 


3K 


3X 


4D 


50 


5H 


5F 


5A 


6H 


ID 


2X 


2A 3C 


4E 


4X 


6X 


M 


IP 


40 


4F 


5H 


5ff 


6F 


1R 


IV 


1U 


IB 


2S 


2D 


4M 


5Q 


5R 


5X 






M 


2E 


3E 


4R 


4J 


4Z 


6T 


6B 


6L-. 


6P 


li’ 


IN 


2P. 


2T 


3P.5E 









Underlined type denotes wheels in reversed positions. ( Underlined type denotes wheels in reversed positions. 
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Tabu K 

A 2F3F4S4K4A6U6C6H6Q1D1U202S305D 
H 1R4Q4H5J5Y6H1P1T1S1Z2Q2B4K505P5V 

V 5H2D2C3Q4S4C5S6U 

T IS 1Y2D2B4R4M1E2M3M4Z5H6G 
Q 2V 2T 2L 4Z 5X 3U 3V 4J 60 
P 1J 3C6F2F2H2V3X3A4H6A 
U 2P 5M 5C 6V 6T 6E 6X 2X 3F 3Y 3C 5L 5ff 5C 6Y 6C 

X IP 2K 2G 2C 3V 3S 3N 3B 4B 1H IK 4B 6F 61 

S 10 II 1C 2S 20 3D 4L 6W 6N 6D 3N 4L 5Z6L 

N 1U 1G IF 3Q 41 5W 5V 5K 6K 1W 2K 3L 4N 5M 6P 

D 1L 2E 50 5F 60 II 4P 4V 6S 

G 1K1Z2Y2X1L1R2A4D4G5T5Y6D6J 
E IV 2J 4U 40 4C 4Y 6P 1J 1Y 3E 3H M 40 iY 5N 5B 6R 6Z 

T 4G 6G 2J 4T 5G 6K 

0 2Z 3R 3K 5D 6Y 13 1U IX 2G 2U 3W 

0 1W 2R 3P 3Z 4W 5N 5A 5Z 6A 6L 1A 21 5X 6M 6fl 

W IT ID 2U 2M 3H 4N 5T 5E 2L 2R 2T SR 5fl 6B 

1 IB 2H 5R 6J 6Z 6T 

Z 2A3U3T3I3A4F4D6R1F1G1V2Y3Z4F5F5I5J5A6V 
L 3G3X4P4H1N2N3T4I4Q4X6H6X 
J IN 1M 2N 21 3M 3J 4V 5L 6B 3D 3J 3P 5E 5R 5U 6N 

V 1H 2W 30 3E 4T 5U 6S 10 2E 3G 3S 4M 5K 6E 

Bp 4J 

K 

B 1A 2Q 3W 5S 5Q IB 2P 31 4R 4U 4B 

M IQ IE IX 3L 3Y 4E 5P 51 5G 5B 6I1C2W2Z3B4E4W6W 

Underlined type denotes wheels In reversed positions. . 
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Tabu B 

A 1R IF 1Y 3M 3Z 4F 5Q 5J 5H 5C 6J IB 2V 2Y 3A 4D 4V 6V 
H 2G3G4T4L4B6V6D6N6R1C1L2N2R3N5C 

V IS 4R 41 5K 5Z 61 10 IS 1R 1Y 2P 2A 4J 5N 50 5U 

Y 5I2C2B3P4R4B5R6T 

Q 1T1Z2E2C4S4N1D2L3L4Y5G6F 
P 2ff 2U 2M 4A 5Y 3T 3U 41 6N 
U 1K3D6G2E2G2U3W3Z4G6Z 
X 2Q 5N 5D 6W 6U 6F 6Y 2W SE 3X 3B 5K 5V 5B 6X 6B 

S IQ 2L 2H 2D 3ff 3T 30 3C 4C 1G 1J 4A 6E 6H 

N IP 1J ID 2T 2P 3E 4M 6X 60 6E 3M 4K 5Y 6K 

D IV 1H 1G 3R 4J 5X 5W 5L 6L IV 2J 2K 4M §L §0 

G 1M 2F 5P 5G 6P 1H 40 4U 6R 

E 1L 1A 2Z 2Y IK IQ 2Z 4C 4F 5S M 60 61 

T 1W2K4V4P4D4Z6Q1I1X3D3G3J 4N 4X 5H 5A 6Q 6Y 
0 4H 6H 21 4S 5F §J 

0 2A3S3L5E6Z1P1T1W2F2T3V 

W IX 2S 3Q 3A 4X 50 5B 5A 6B 611 1Z 2H 5W 6L 6P 

1 1U IE 2V 2N 31 40 5U 5F 2K 23 2S 3Q 5P 6A 

Z 1C 21 5S 6K 6A 6S 

L 2B3V3U3J3B4G4E6SlElFiy2X3Y4E5E5H5I5Z6U 

J3H3Y4Q4X1M2H3S4H4P4W6G6W 

F 10 IN 20 2J 3N 3K 4W 5M 6C 3C 31 30 5D 5Q 5T 6H 

B II 2X 3P 3F 4U 5V 6T IN 2D 3F ^ 4L 5J 6D 

X 4K 

B 

M 1B2R3X5T5R1A203H4Q4T4A 
Underlined type denotes wheels in reversed positions. 
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Table. M 



A 


1C 


2S 


3Y 


5U 


5S 


1Z 


2N 


3G 


4P 


4S 


4Z 












H 


IS 


1G 


1Z 


3N 


3A 


4G 


5R 


5K 


51 


5D 


6K 


1A 


2U 


2X 


3Z. 


4C 4U 6U 


V 


2H 


3H 


4U 


4M 


4C 


6ff 


6E 


60 


6S 
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U 


Q 


N 


V 


ff 


A 


If 


D 


H 


Z 


L 


F 


B 


I 


p 


L 


F 


D 


E 


N 


c 


H 


K 


Q 


U 


Z 


ff 


A 


S 


R 


Y 


M 


J 


G 


T 


X 


V 


0 
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Setting 




Appendix V 

FIRST-INTERVAL DATA— PLAIN-TEXT RELATIONSHIPS 

Table B 

B 



J 


1Y 


2M 


3F 


40 


4R 


4Y 


ID 


2T 


3Z 


5V 


5T 
















M 


1A 


2U 


2X 


3Z 


4C 


4U 


6U 


IS 


IS 


1Z 


3N 


3A 


4G 


5R 


5K 


51 


5D 


6K 


A 


1C 


1L 


2N 


2R 


3N 


5C 


2G 


3G 


4T 


4L 


4B 


6V 


6D 


6N 


6R 








Q 


IP 


IT 


IS 


1Z 


2Q 


2B 


4K 


50 


5P 


5V 


1R 


49 


4H 


5J 


5Y 


§H 






I 


2E 


2D 


3R 


4T 


4D 


5T 


6V 


5G 






















0 


1G 


20 


30 


4B 


5J 


61 


Ifi 


Iff 


2B 


2Z 


4P 


4K 














F 


3X 


3Y 


4M 


6R 


2S 


29 


21 


4W 


5U 




















P 


2J 


2L 


2Z 


3B 


3E 


4L 


6E 


IF 


3Y 


6B 


















0 


2C 


3K 


3D 


3H 


5Q 


5B 


5H 


6D 


6H 


2K 


5H 


5X 


69 


60 


6Z 


6S 






X 


IN 


IQ 


4H 


6L 


60 


1J 


2E 


2A 


2ff 


3P 


3M 


3H 


3V 


4V 










z 


3U 


4S 


5G 


6S 


1H 


IB 


IV 


2L 


2H 


3W 


4E 


6P 


6G 


6W 










R 


IE 


2S 


3T 


4V 


5U 


6X 


lU 


1Y 


IX 


31 


4A 


50 


5N 


5C 


6C 








V 


1R 


4Y 


4E 


6B 


1C 


2V 


5F 


5W 


6F 




















L 


IV 


IB 


2K 


4N 


4Q 


5D 


51 


6N 


6T 


1A 


IP 


20 


2N 












T 


1U 


1J 


3P 


3S 


3V 


4Z 


4J 


5Y 


5M 


6C 


6K 


IK 


2Y 


4J 


4D 


4R 


4N 


6E 


W 


2V 


4F 


5S 


6W 


4U 


6U 


























U 


ID 


1H 


IK 


2T 


2H 


3J 


2M 


3E 


3X 


5Q 


6L 
















T 


10 


2ff 


5L 


6A 


6E 


11 


2D 


3B 


3L 


41 


5Z 


5H 


5L 


6X 


6M 








H 


2A 


2G 


21 


3G 


5F 


Of 

u> 


IE 


10 


2F 


2X 


3S 


4Y 


5E 


5P 










G 


6J 


1L 


2R 


5B 


6T 


6J 


























D 


IX 


IV 


1M 


2P 


3Q 


4ff 


5W 


5Z 


5A 


5R 


6M 


2J 


3D 


3C 


3R 


3J 


40 


4M 4S 6A 


X 


IF 


2F 


3L 


4A 


41 


4P 


6Z 


6P 


30 


3F 


4X 


4F 














E 


3W 


3C 


31 


5X 


5K 


5N 


6G 


iu 


IT 


2U 


2P 


3T 


39 


4C 


5S 


61 






S 


11 


2Y 


3A 


3M 


4G 


5E 


6Y 


IN 


2C 


3U 


3K 


4Z 


5A 


6Y 











N 

Underlined type denotes wheels In reversed positions. 

( 101 ) 




102 



103 



« 



Table J 

B 

J 



M 


1Z 


2N 


3G 


4P 


4S 


4Z 


IS 


2S 


3Y 


5U 


5S 
















A 


IB 


2V 


2Y 


3A 


4D 


4V 


6V 


15 


IE 


11 


3M 


3Z 


4F 


5S 


5J 


5H 


5C 


6J 


Q 


ID 


1H 


20 


2S 


30 


5D 


2F 


3F 


4S 


4K 


4A 


6U 


6C 


6M 


§S 








I 


IQ 


1U 


IT 


1A 


2R 


2C 


4L 


5P 


5Q 


5ff 


IS 


4P 


4G 


51 


5X 


6G 






0 


2F 


2E 


3S 


4U 


4E 


5U 


6ff 


5F 






















P 


1H 


2P 


3P 


4C 


5K 


6J 


IE 


IE 


2A 


2Y 


4 Q 


4J 














P 


3Y 


3Z 


4N 


6S 


2R 


2P 


2H 


4V 


5T 




















0 


2K 


211 


2A 


3C 


3F 


4M 


6F 


IE 


3X 


6A 


















X 


2D 


3L 


3E 


31 


5R 


5C 


51 


6E 


61 


2J 


5G 


5W 


6P 


6N 


6Y 


65 






z 


10 


1R 


41 


6U 


6P 


11 


2D 


2Z 


2V 


30 


3L 


3G 


3U 


4U 










B 


3V 


4T 


5H 


6T 


1G 


1A 


1U 


2K 


2G 


3V 


4D 


60 


6F 


6V 










V 


IF 


2T 


3U 


4W 


5V 


6Y 


1L 


IX 


11 


3H 


4Z 


5N 


5H 


5B 


6B 








L 


IS 


4Z 


4F 


6C 


11 


2U 


5E 


5V 


6E 




















T 


1W 


1C 


2L 


40 


4R 


5E 


5J 


60 


6U 


1Z 


IS 


2N 


2M 












W 


IV 


IK 


3Q 


3T 


3V 


4A 


4K 


5Z 


5N 


6D 


6L 


M 


2X 


41 


4C 


43 


4M 


6D 


u 


2W 


4G 


5T 


6X 


4T 


6T 


























T 


IE 


11 


1L 


2U 


21 


3K 


2L 


3D 


3W 


5P 


6K 
















H 


IP 


2X 


511 


6B 


6F 


1H 


2C 


3A 


3K 


4H 


5Y 


5L 


5K 


6ff 


6L 








G 


2B 


2H 


2J 


3H 


5G 


6R 


ID 


15 


2E 


2W 


35 


4X 


5D 


50 










D 


6K 


IK 


23 


5A 


6S 


61 


























K 


1Y 


IX 


IN 


2Q 


3R 


4X 


5X 


5A 


5B 


5S 


6N 


21 


3C 


3B 


33 


31 


4N 


4L 


E 


1G 


2G 


3M 


4B 


4J 


4Q 


6A 


6Q 


3N 


3E 


4ff 


4E 














S 


3X 


3D 


3J 


5Y 


5L 


50 


6H 


11 


IS 


2T 


20 


3S 


3P 


4B 


5R 


6H 






N 


1J 


2Z 


3B 


3N 


4H 


5F 


6Z 


1M 


2B 


3T 


3J 


4Y 


5Z 


M 










Underlined 


type 


denotes wheels in 


reversed 


positions 





















Table M 



B 

T 


IK 


2A 


3C 


30 


41 


5G 


6A 


1L 


2A 


3S 


31 


4X 


5Y 


6ff 










M 






































A 


1A 


20 


3H 


4Q 


4T 


4A 


15 


55 


3X 


5T 


5R 
















Q 


1C 


2V 


2Z 


3B 


4E 


4ff 


6W 


13 


IE 


15 


3L 


3Y 


4E 


5E 


51 


5G 


5B 


61 


I 


IE 


IN 


2P 


2T 


3P 


5E 


2E 


3E 


4R 


4J 


4Z 


6T 


6B 


6L 


6E 








O 


1R 


IV 


1U 


IB 


2S 


2D 


411 


5Q 


5R 


5X 


IE 


40 


4F 


5H 


5V 


6F 






7 


2G 


2F 


3T 


4V 


4F 


5V 


6X 


5E 






















P 


11 


2Q 


3Q 


4D 


5L 


6K 


IS 


IS 


2Z 


2X 


4N 


41 














0 


3Z 


3A 


40 


6T 


S3 


20 


2G 


4U 


5S 




















X 


2L 


2N 


2B 


3D 


3G 


4N 


6G 


IS 


3V 


6Z 


















z 


2E 


311 


3F 


3J 


5S 


5D 


5J 


6F 


6J 


21 


5F 


5V 


60 


6M 


6X 


53 






B 


IP 


IS 


4J 


6N 


6Q 


15 


2C 


2Y 


2U 


3N 


3K 


3E 


3T 


4T 










V 


3W 


4U 


51 


6U 


IE 


iz 


IT 


2J 


2F 


3U 


4C 


6N 


6E 


6U 










L 


1G 


2U 


3V 


4X 


5V 


6Z 


15 


11 


IE 


3G 


4Y 


5M 


5L 


5A 


6A 








T 


IT 


4A 


4G 


6D 


1A 


2T 


5D 


5U 


6D 




















W 


IX 


ID 


2K 


4P 


4S 


5F 


5K 


6P 


6V 


11 


15 


2M 


2L 












U 


Iff 


1L 


3R 


3U 


3X 


4B 


4L 


5A 


50 


6E 


6H 


11 


2ff 


4H 


4B 


4P 


4L 


6C 


T 


2X 


4H 


5U 


6Y 


4S 


6S 


























H 


IF 


1J 


IK 


2V 


2J 


3L 


2K 


3S 


3V 


50 


6J 
















a 


IQ 


2Y 


5N 


6C 


6G 


IS 


2B 


3Z 


3J 


4G 


5X 


5K 


5J 


6V 


6K 








D 


2C 


21 


2K 


31 


5H 


6S 


IS 


1M 


2D 


2V 


53 


4ff 


5E 


5N 










K 


6L 


1J 


2P 


5Z 


65 


6H 


























B 


1Z 


1Y 


10 


2R 


3S 


4Y 


5Y 


5B 


5C 


5T 


60 


2H 


3B 


3A 


3E 


3H 


4M 


4K 4fi 6Y 


8 


1H 


2H 


3N 


4C 


4K 


4R 


6B 


6R 


3M 


3D 


4V 


4D 














K 


3Y 


3E 


3K 


5Z 


5M 


5P 


61 


15 


15 


2S 


2N 


35 


30 


4A 


53 


6G 







Underlined type denotes wheels in reversed positions. 



k 
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105 



Table A 



B 


3Z 


3F 


3L 


5A 


5N 


5Q 


6J 


1R 


1Q^2M3Q3N4Z5P6F 




J 


1L 


2B 


3D 


3P 


4J 


5H 


6B 


IK 


2Z 3R 3H 


4ff 5X 6V 




M 
























A 
























Q 


IB 


2P 


31 


4R 


4U 


4B 


1A 


2 2 


3W 5S 5Q 






I 


ID 


2X 


2A 


3C 


4F 


4X 


6X 


IP 


1D1W3K3X4D505H5F5A 


6H 


0 


IF 


10 


2Q 


2U 


3Q 


5F 


2D 


3D 


4Q 41 4Y 


6S 6A 6K 60 




F 


IS 


1W 


IV 


1C 


2T 


2E 


4N 


5R 


5S 5Y 10 


4N 4E 5G 5V 6E 




P 


2H 


2G 


3U 


4V 


4G 


5ff 


6Y 


5D 








0 


1J 


2R 


3R 


4E 


5M 


6L 


IN 


IT 


2Y 2ff 4M 4H 




X 


3A 


3B 


4P 


6U 


2P 


2N 


2F 


4T 


5R 






z 


2H 


20 


2C 


3E 


3H 


40 


6H 


1C 


3V 6Y 






B 


2F 


3N 


3G 


3K 


5T 


5E 


5K 


6G 


6K 2H 5E 


5U 6N 6L 6W 6£ 




V 


IQ 


IT 


4K 


60 


6R 


1G 


2B 


2X 


2T 3M 5J 


3E 3S 4S 




L 


3X 


4V 


5J 


6V 


IE 


11 


IS 


21 


2E 3T 4B 


6M 6D 6T 




T 


1H 


2V 


3W 


4Y 


5X 


6A 


M 


IV 


1U 3F 4X 


5L 5K 5Z 6g 




W 


1U 


4B 


4H 


6E 


1Z 


2S 


5C 


5T 


6C 


■ 




U 


1Y 


IE 


2N 


4Q 


4T 


5G 


5L 


6Q 


6W IX 1M 


2L 2K 




T 


IX 


1M 


3S 


3V 


3Y 


4C 


4M 


5B 


5P 6F 6N 


1H 2V 4G 4A 40 4K 


6B 


H 


2Y 


41 


5V 


6Z 


4R 


6R 












G 


1G 


IK 


IN 


2W 


2K 


3M 


2J 


3B 


5U 5N 61 






D 


1R 


2Z 


50 


6D 


6H 


IF 


2A 


3Y 


51 4F 5ff 


5J 51 6U 6J 




X 


2D 


2J 


2L 


3J 


51 


6T 


IB 


1L 


2C 2U 5P 


4V 5B 5M 




E 


6U 


11 


20 


5Y 


§2 


6G 












S 


1A 


1Z 


IP 


2S 


3T 


4Z 


5Z 


5C 


5D 5U 6P 


2G 3A 3Z 30 3G 4L 4J 4P 6X 


N 


11 


21 


30 


4D 


4L 


4S 


6C 


6S 


3L 3C 4U 


4C 


, 


Underlined type denotes wheels in 


reversed 


positions. 


. 





















Table 


Q 


















B 


1J 


2J 


3P 


4E 


4M 


4T 


6D 


6T 


3K 


3B 


4T 


4B 














J 


3A 


3G 


3M 


5B 


50 


5R 


6K 


12 


IP 


22 


2L 


3P 


3M 


4Y 


50 


6E 






M 

A 


1U 


2C 


3E 


3Q 


4K 


51 


6C 


1J 


2Y 


32 


3G 


4 V 


5W 


6U 










Q 

I 


1C 


2Q 


3J 


4S 


4V 


4C 


1Z 


2P 


3V 


5R 


5P 
















O 


IE 


2Y 


2B 


3D 


4G 


4Y 


6Y 


10 


1C 


IV 


3J 


3 ff 


4C 


5N 


5G 


5E 


5Z 


6G 


F 


1G 


IP 


2R 


2V 


3R 


5G 


2C 


3C 


4P 


4H 


4X 


6R 


6Z 


6J 


6N 








P 


IT 


IX 


1W 


ID 


2U 


2F 


40 


5S 


5T 


5Z 


IN 


4M 


4D 


5F 


5U 


6D 






0 


21 


2H 


3V 


4X 


4H 


5X 


6Z 


5C 






















X 


IK 


2S 


3S 


4F 


5N 


6M 


1M 


IS 


2X 


2V 


4L 


4G 














z 


3B 


3C 


4Q 


6V 


20 


2M 


2E 




52 




















B 


2N 


2P 


2D 


3F 


31 


4P 


61 


IB 


3U 




















V 


2G 


30 


3H 


3L 


5U 


5F 


5L 


6H 


6L 


2G 


5D 


5T 


6M 


6K 


6V 


60 






L 


1R 


1U 


4L 


6P 


6S 


IF 


2A 


2W 


2S 


3L 


31 


3D 


3R 


4R 










T 


3Y 


4W 


5K 


6ff 


ID 


IX 


1R 


2H 


2D 


3S 


4A 


6L 


6C 


6S 










W 


11 


2ff 


3X 


4Z 


5Y 


6B 


11 


m 


IT 


3E 


4W 


5K 


5J 


5Y 


6Y 








u 


IV 


4C 


41 


6F 


1Y 


2R 


5B 


5S 


6B 




















T 


1Z 


IF 


20 


4R 


4U 


5H 


5M 


6R 


6X 


1W 


1L 


2K 


2J 












H 


1Y 


IN 


3T 


3ff 


3Z 


4D 


4N 


5C 


5Q 


6G 


60 


1G 


2U 


4F 


4Z 


4N 


4J 


6A 


a 


2Z 


4J 


5V 


6A 


43 


§2 


























D 


1H 


1L 


10 


2X 


2L 


3N 


21 


3A 


3T 


5M 


6H 
















K 


IS 


2A 


5P 


6E 


61 


IE 


2Z 


3X 


3H 


4E 


5V 


51 


5H 


6T 


61 








E 


2E 


2K 


2M 


3K 


5J 


61) 


1A 


IK 


2B 


2T 


30 


4U 


5k 


5L 










S 


6N 


1H 


2N 


5X 


6P 


6F 


























Iff 


IB 


1A 


IQ 


2T 


3U 


4A 


5A 


5D 


5E 


5V 


6Q 


2F 


3Z 


3Y 


3N 


3F 


4K 


41 



Underlined type denotes wheels in reversed positions. 



lip 



Iin) : I 



is 
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Tabu I 

B 1C IB 1R 2U 3V 4B 5B 5E 5F 5W 6R 2E 3Y 3X 3M 3E 4J 4H 4N §Y 

J IK 2K 3Q 4F 4N 4U 6E 6U 3J 3A 4S 4A 

M 3B3H3N5C5P5S6L1P102P2K3Q3L4X5N6D 
A IN 2D 3F 3R 4L 5J 6D1I2X3P3F4JJ5V6T 

Q 

I 

O ID 2R 3K 4T 4W 4D 1Y 20 35 5Q 50 

7 1F2Z2C3E4H4Z6Z1N1B1U3I3V4B5M5F5D5Y6F 
P 1H IQ 2S 2W 3S 5H 2B 3B 40 4G 4W 6Q 6Y 61 6M 

C 1U 1Y IX IE 2V 2G 4P 5T 5U 5A 1M 4L 40 5E 5T 65 

X 2J 21 3W 4Y 41 5Y 6A 5B 

Z 1L2T3T4G506N1L1R2W2U4K4F 
B 3C 3D 4R 6W 2N gL 2D 4R §P 

V 20 2Q 2E 3G 3J 4Q 6J 1A 3T 6W 

L 2H 3P 31 3M 5V 5G 5M 61 6M 2F 5C 5§ §L 6J 65 6N 

T 1S1V4M6Q6T1E2Z2V2R3K3H3C354S 
W 3Z 4X 5L 6X 1C 1W lfi 2G 2C 3R 4Z 6K 6g 6R 
IT 1J2X3Y4A5Z6C1H1T1S3D4V5J5I5X6X 
T 1W4D4J6G1X2Q5A5R6A 
H 1A1G2P4S4V5I5N6S6Y1V1K2J2I 
G 1Z 10 3U 3X 3A 4E 40 5D 5R 6H 6P IF 2T 4E 4Y 4M 41 6Z 
D 2A 4K 5X 6B 4P 6P 
K II 1M IP 2Y 2H 30 2H 3Z 3S 5L 6G 
E 1T2B5Q6F6J1D2Y3W3G4D555H5G6S6H 
S 2F2L2N3L5K6V1Z1J2A2S3N4T5Z5K 
N 60 1G 2M 5W 60 6E 

Underlined type denotes wheels in ravened positions. 
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Ta.bu O 

B 6P IF 2L 5V 6N 6D 

J ID 1C IS 2V 3W 40 5C 5F 5G 5X 6S 2D 3X 3W 3L 3D 41 4G 4M 6U 

M 1L 2L 3R 4G 40 4V 6F 6V 31 3Z 4R 4Z 

A 3C 31 30 5D 5Q 5T 6M 10 IN 20 2J 3N 3K 4W 5M 6C 

Q 10 2E 3G 3S 4M 5K 6E 1H 2W 30 3E 4T 5U 6S 

I 

O 

7 IE 2S 3L 4U 4X 4E IX 2N 3T 5P 5N 

P 1G2A2D3F4I4A6A1M1A1T3H354A5L5E5C5X6E 
0 II 1R 2T 2X 3T 51 2A 3A 4N 4F 4V 6P 6X 6H 6L 

X IV 1Z 1Y IF 2W 2H 4Q 5U 5V 5B 1L 4K 4B 5D 5S 6B 

Z 2K2J3X4Z4J5Z6B5A 
B 1M 2U 3U 4H 5P 60 IK 19 2V 2T 4J 4E 
V 3D3E4S6X2M2K2C4£50 
L 2P 2R 2F 3H 3K 4R 6K 1Z 3S 6V 

T 21 3Q 3J 3N 5ff 5H 5N 6J 6N2E5B5R6K6I6T6M 
W 1T1W4N6R6U1D2Y2U2Q3J3G3B3P4P 
U 3A4Y5M6YlBlVlP2F2B3fi4Y6J6A§a 
T IK 2Y 3Z 4B 5A 6D 1G IS 1R 3C 4U 51 5H 5W 6ff 
H 1X4E4K6H112P5Z5Q6Z 
G IB 1H 2Q 4T 4V 5J 50 6T 6Z 1U LT 21 2H 

D 1A IP 3V 3Y 3B 4F 4P 5E 5S 61 6Q IE 2S 4D 4X 4L 4H 6Y 

K 2B 4L 5Y 6C 4Q 60 

E 1J IN IQ 2Z 2N 3P 2G 3Y 3R 5K 6F 

S 1U2C5R6G6K1C2X3V3F4C5T5G5F6R6G 
N 2G 2M 20 3M 5L 6W 1Y II 2Z 2R 3M 4S 5Y 5J 
Underlined type denotes wheels in reversed positions. 
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Table F 

B 2H 2N 2P 3N 5M 6X IX 1H 2Y 2£ 3L 4R 5X 51 

J 6Q IE 2K 5U 6M 6C 

M IE ID IT 2W 3X 4D 5D 5G 5H 5Y 6T 2C 3W 3V 3K 3C 4H 4F4L 6T 

A 1M 2M 3S 4H 4P 4W 6G 6ff 3H 3Y 4Q 4Y 

Q 3D 3J 3P 5E 5R 5U 6N IN 1M 2N 21 3M 3J 4V 5L 6B 

I IP 2F 3H 3T 4N 5L 6F 1G 2V 3N 3D 4S5T 6R 

O 

F 

P IP 2T 3M 4V 4Y 4F 1W 2M 3S 50 a? 

0 1H2B2E3G4J4B6B1L1Z1S3G5T4Z5K5D5B5W6D 
X 1J IS 2U 2Y 3U 5J 2Z SZ 4M 4E 4U 60 6ff 6G 6K 

Z Iff 1A 1Z 1G 2X 21 4R 5V 5ff 5C IK 4J 4A 5C 5R 6A 

B 2L 2K 3Y 4A 4K 5A 6C 5Z 

V IN 2V 3V 41 5Q 6P 1J IP 2U 2S 41 4D 

L 3E 3F 4T 6Y 2L 2J 2B 4P 5N 

T 2Q 2S 2G 31 3L 4S 6L 1Y 3R 6U 

W 2J 3R 3K 30 5X 51 50 6K 60 2D 5A 5Q §J 6H 6S §L 

U 1U IX 40 6S 6V 1C 2X 2T 2P 31 3F 3A 30 40 

T 3B4Z5N6Z1A1U102E2A3P4X6I6Z6P 

H 1L 2Z 3A 4C 5B 6E IF 1R IQ 3B 4T 5H 5G 5V 6V 

G 1Y 4F 4L 61 IV 20 5Y 5P 6Y 

D 1C II 2R 4U 4X 5K 5P 6U 6A IT II 2H 2G 

K IB IQ 3W 3Z 3C 4G 4Q 5F 5T 6J 6R ID 2R 4C 4W 4K 4G 6X 

E 2C4U5Z6D4N6N 

S IK 10 1R 2A 20 3Q 2F 3X 3Q 5J 6E 1 

N IV 2D 5S 6H 6L IB 2W 3U 3E 4B 5S 5F 5E 6Q 6F 

Underlined type denotes wheels in reversed positions. 
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Table P 

B Iff 2E 5T 61 6M 1A gV 3J 3D 4A §R 5E 5D 6P 6E 

I 21 20 2Q 30 5N 6Y iff 1G 2X 2P 3K 4fl 5ff Ki 

M 6R ID 2J 5T 6L 6B 

A IF IE 1U 2X 3Y 4E 5E 5H 51 5Z 6U 2B 3V 3U 3J 3B 4G 4E 4K 6S 

Q IN 2N 3T 41 4Q 4X 6H 6X 3G 3X 4P 4X 

I 3E 3K 3Q 5F 5S 5V 60 1M 1L 2M 2H 3L 31 4U 5K 6A 

O IQ 2G 31 3U 40 5M 6G IF 2U 3M 3C 4R 5S 

F 

P 

0 1G 2U 3N 4W 4Z 4G IV 2L 3R 5N 5L 

X II 2C 2F 3H 4K 4C 6C IK 1Y 1R 3S 4Y 5J §C 5A 5V 6C 

Z IK IT 2V 2Z 3V 5K 2Y 3Y 4L 4D 4T 6N 6V 6F 6J 

B IX IB 1A 1H 2Y 2J 4S 5ff 5X 5D 1J 41 4Z 5B 5Q 6Z 

V 2M 2L 3Z 4B 4L 5B 6D 5Y 

L 10 2W 3ff 4J 5R 6Q II 10 2T 2R 4H 4C 

T 3F 3G 4U 6Z 2K 21 2A 40 5M 

W 2R2T2H3J3M4T6M1X3Q6T 
JS 2K 3S 3L 3P 5Y 5J 5P 6L 6P 2C §Z 5P 61 6G gR 6K 

T IV 1Y 4P 6T 6W IB 2ff 2S 20 3H 3E 3Z 3N 4N 

H 3C4A506A1Z1T1N2D2Z304W6H6Y60 
G 1M2A3B4D5C6F1E1Q1P3A4S5G5F5U6U 
D 1Z4G4M6J1U2N5X506X 
X ID 1J 2S 4V 4Y 5L 5Q 6V 6B IS 1H 2G 2F 
B lClR3X3A3D4H4R5G5U6K6SlC224g4V4J4F6V 
S 2D 4N 5A 6E 4M 6M 

X 1L IP IS 2B 2P 3R 2E 3W 3P 51 6D 
Underlined type denotes wheels in reversed positions. 
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Tabu C 

B 1M IQ IT 2C 2Q 3S 2D 3V 30 5H gC 
J 1X2F5U6J 6N^Z2U3S3C4Z5Q5D5C606D 
M 2J 2P 2R 3P 50 6Z IV IF 2ff gO 3J 4P 5V 5G 
A 6S lfi 21 5S 6K gA 

Q 16 IF IV 2Y 3Z 4F 5F 51 5J 5A6V2A3U3T3I3A4F4D4J6R 
I 10 20 3U 4J 4R 4Y 61 6Y 3F 3W 40 4W 

O 3F 3L 3R 5G 5T 5ff 6P 1L IK gL 2G 3K 3H 4T 5J 6Z 

F 1R2H3J3V4P5N6H1E2T3L3B4Q5R6P 

P 

a 

X lH2V304X4A4Hiy2K3Q5M5K 
Z U2D263I4L4D6DlJlXlfl3E3R4X5I5B5g5U6B 
B 1L 1U 2W 2A 3W 5L 2X 3X 4K 4C 4S 6M 6U 6E 61 

V 1Y 1C IB II 2Z 2K 4T 5X 5Y 5E II 4H 4Y 5A 5P gY 

L 2N 2M 3A 4C 4M 5C 6E 5X 

Y 1P2X3X4K5S6R1H1N2S2Q4G4B 

W 3G 3H 4V 6A 2J 2H 2Z 4N 5L 

U 2S 2U 21 3K 3N 4U 6N 1W 3P gS 

T 2L 3T 311 3Q 5Z 5K 5Q 6M 6Q 2B 5Y 50 gH gF 6Q gJ 

H 1W 1Z 4Q 6U 6X 1A 2V 2R 2N 3G 3D 3Y 3M 4M 

Q 3D4B5P6BrYlSlM2C2Y3N4V6GgXgN 
D 1N2B3C4E5D6G1D1P102Z4R5F5E5T6T 
K lA4H4N6KlTgM5g5NgW 
E IE IK 2T 4ff 4Z 5M 5R 6ff 6C 1R 1G 2F 2E 

S ID IS 3Y 3B 3E 41 4S 5H 5V 6L 6T IB 2P 4A 4U 41 4E gV 

N 2E 40 5B 6F 4L gL 

Underlined type denotes wheels in reversed positions. 



I 
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Tabu X 

B 2F 4P 5C 6G 4K 6K 

J IN 1R 1U 2D 2R 3T 2C 3U 3N 5G gB 

M 1Y 2G 5V 6K 60 iY 2T 3R 3B 4Y 5P 5C 5B gN gC 

A. 2K 2Q 2S 3Q 5P 6A 1U IE 2V 2N 31 40 5U 5F 

Q 6T IB 2H 5R gJ gZ 

I 1H 1G Iff 2Z 3A 4G 5G 5J 5K 5B 6ff 2Z 3T 3S 3H 3Z 4E 4C 41 gfi 

O 1P2P3V4K4S4Z6J6Z3E3V4N4V 
F 3G 3M 3S 5H 5U 5X 6Q IK 1J 2K 2F 3J 3G 4S 51 gY 

P IS 21 3K 3ff 4Q 50 61 ID 2S 3K 3A 4P 5fi gO 



Z II 2ff 3P 4Y 4B 41 IT 2J 3P §L 5J 

H lK2E2H3J4M4E6EniWlP3D3£4ff5H5A5Y5TgA 

V lMlV2X2B3X5M2W3ff4J4B4RgLgTgD6H 

L 1Z ID 1C 1J 2A 2L 4U 5Y 5Z 5F 1H 4G 4X 5Z 50 gX 

Y 20 2N 3B 4D 4N 5D 6F 5ff 

W IQ 2Y 3Y 4L 5T 6S 1G 1M 2R 2P 4F 4A 

U 3H 31 4ff 6B 21 2G 2Y 4M 5K 

T 2T 2V 2J 3L 30 4V 60 IV 30 

H 2S 3U 3N 3R 5A 5L 5R 6N 6R gA 5X 5N gG gE 6P 61 

G IX 1A 4R 6V 6Y 1Z 2U 2Q 2M 3F 3C 3X 3L 4L 

D 3E 4C 5Q 6C IX 1R 1L 2B 2X 3U 4U gF gff gH 

E 102C3D4F5E6H1C101N3Y425E5D5S6S 
E IB 41 40 6L IS 2L 5V 5M 6V 

S IF 1L 2U 4X 4A 5N 5S 6X 6D IQ IF 2E 2D 

N IE IT 3Z 3C 3F 4J 4T 51 5ff 6M 6U 1A 20 4Z 4T ^ gU 

Underlined type denotes wheels in reversed positions. 
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Tab La Z 



B 


IF 


1U 


3A 


3D 


3G 


4K 


4U 


5J 


5X 


6N 


6V 


In 


2N 


4Y 


4S 


4G 


4C 


6T 


J 


2G 


4Q 


5D 


6H 


4J 


6J 


























M 


10 


IS 


IV 


2E 


2S 


3U 


2B 


3T 


3M 


5F 


6A 
















A 


1Z 


2H 


5W 


6L 


6P 


IX 


2S 


3Q 


3A 


4X 


50 


5B 


5A 


6M 


6B 








Q 


2L 


2R 


2T 


3R 


5Q 


6B 


IT 


ID 


2U 


2M 


3H 


4N 


5T 


5E 










I 


6U 


1A 


2G 


5Q 


61 


6Y 


























0 


11 


1H 


IX 


2A 


3B 


4H 


5H 


5K 


5L 


5C 


6X 


2Y 


3S 


3R 


3G 


3Y 


4D 


4B 4H 6P 


F 


IQ 


2Q 


3V 


4L 


4T 


4A 


6K 


6A 


3D 


3U 


4M 


4U 














P 


3H 


3N 


3T 


51 


5V 


5Y 


6R 


LJ 


11 


2J 


2E 


31 


3F 


4R 


5H 


6X 






0 


IT 


2J 


3L 


3X 


4R 


5P 


6J 


1C 


2R 


3J 


3Z 


40 


5P 


6N 











X 

Z 



R 


1J 


2X 


3Q 


4Z 


4C 


4J 


IS 


21 


30 


5K 


51 












V 


1L 


2F 


21 


3K 


4N 


4F 


6F 


1H 


IV 


10 


3C 


3P 


4V 


5G 


5Z 


5X 5S 6Z 


L 


IN 


IV 


2Y 


2C 


3Y 


5N 


2V 


3 V 


41 


4A 


4Q 


6K 


6S 


6C 


6G 




Y 


1A 


IE 


ID 


IK 


2B 


2M 


4V 


5Z 


5A 


5G 


1G 


4F 


4ff 


5Y 


5N 


6W 


W 


2P 


20 


3C 


4E 


40 


5E 


6G 


5V 


















u 


1R 


2Z 


3Z 


4M 


5U 


6T 


IF 


1L 


2Q 


20 


4E 


4Z 










T 


31 


3J 


4X 


6C 


2H 


2F 


2X 


4L 


5J 
















H 


2U 


2ff 


2K 


3M 


3P 


4ff 


6P 


1U 


3N 


6Q 














G 


2N 


3V 


30 


3S 


5B 


5M 


5S 


60 


6S 


2Z 


5V 


5U 


6F 


6D 


60 


6H 


D 


1Y 


IB 


4S 


6W 


6Z 


1Y 


2T 


2P 


2L 


3E 


3B 


5ff 


3K 


4K 






K 


3F 


4D 


5R 


6D 


1W 


IQ 


IK 


2A 


2W 


3L 


4T 


6E 


6V 


6L 






E 


IP 


2D 


3E 


4G 


5F 


61 


IB 


IN 


1M 


3X 


4P 


5D 


5C 


5R 


6R 




S 


1C 


4J 


4P 


6M 


1R 


2K 


5U 


5L 


6U 
















N 


1G 


1M 


2V 


4Y 


4B 


50 


5T 


6Y 


6E 


IP 


IE 


2D 


2C 








Underlined 


type 


denotes 


wheels in 


reversed 


positions 


i. 















Table R 



B 


1H 


IN 


2ff 


4Z 


4C 


5P 


5U 


6Z 


6F 


10 


ID 


2C 


2B 












J 


1G 


IV 


3B 


3E 


3H 


4L 


4V 


5K 


5Y 


60 


6W 


1Y 


2M 


4X 


4R 


4F 


4B 


6S 


M 


2H 


4R 


5E 


61 


41 


61 


























A 


IP 


IT 


1W 


2F 


2T 


3V 


2A 


3S 


3L 


5E 


6Z 
















Q 


1A 


21 


5X 


6M 


6Q 


Iff 


2R 


3P 


3Z 


4ff 


5N 


5A 


5Z 


6L 


6A 








I 


2H 


2S 


2U 


3S 


5R 


6C 


IS 


1C 


2T 


2L 


3G 


4M 


5S 


5D 










0 


6V 


1Z 


2F 


5P 


6H 


6X 


























F 


1J 


11 


1Y 


2B 


3C 


41 


51 


5L 


511 


5D 


6Y 


2X 


3R 


3Q 


3F 


3X 


4C 


4A 4G 60 


P 


1R 


2R 


3X 


4M 


4U 


4B 


6L 


6B 


3C 


3T 


4L 


4T 














0 


31 


30 


3U 


5J 


5W 


5Z 


6S 


11 


1H 


21 


2D 


3H 


3E 


4Q 


5G 


6ff 






X 


1U 


2K 


311 


3Y 


4S 


5Q 


6K 


IB 


2Q 


31 


3Y 


4N 


50 


6M 











Z 

R 



V 


IK 


2Y 


3R 


4A 


4D 


4K 


1R 


2H 


3N 


5J 


5H 












L 


1U 


2G 


2J 


3L 


40 


4G 


6G 


1G 


m 


IN 


3B 


30 


4U 


5F 


5Y 


5ff 


Y 


10 


IX 


2Z 


2D 


3Z 


50 


2U 


3U 


4H 


4Z 


4P 


6J 


6R 


6B 


6F. 




W 


IB 


IF 


IE 


1L 


2C 


2N 


4ff 


5A 


5B 


5H 


IE 


4E 


4V 


5X 


5M 


6V 


IT 


2Q 


2P 


3D 


4F 


4P 


5F 


6H 


5U 


















T 


IS 


2A 


3A 


4N 


5V 


6U 


IE 


IK 


2P 


2N 


4D 


4Y 










H 


3J 


3K 


4Y 


6D 


CSI 

evil 


2E 


2ff 


4K 


51 
















G 


2V 


2X 


2L 


3N 


3Q 


4X 


6Q 


IT 


3M 


6P 














D 


20 


3ff 


3P 


3T 


5C 


5N 


5T 


6P 


6T 


2Y 


5V 


5L 


6E 


6C 


6N 


6G 


K 


1Z 


1C 


4T 


6X 


6A 


ix 


2S 


20 


2K 


3D 


3A 


3V 


3J 


4J 






E 


3G 


4E 


5S 


6E 


IV 


IP 


LJ 


2Z 


2V 


3K 


4S 


6D 


6U 


6K 






S 


IQ 


2E 


3F 


4H 


5G 


6J 


1A 


1M 


1L 


3W 


40 


5C 


5B 


5Q 


6Q 




N 


ID 


4K 


4Q 


6N 


IQ 


2J 


5T 


5K 


6T 
















Underlined 


type 


denotes 


wheels in 


reversed 


positions. 
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Tabu V 



B 


IE 


4L 


4R 


60 


IP 


21 


5S 


5J 


6S 




















I 


11 


10 


2X 


4A 


4D 


5Q 


5V 


6A 


6G 


IN 


ifi 


2B 


2A 












M 


1H 


Iff 


3C 


3F 


31 


411 


4V 


5L 


5Z 


6P 


6X 




2L 


4ff 


4fi 


4E 


4A 


6R 


A 


21 


4S 


5F 


6J 


4H 


6H 


























Q 


IQ 


1U 


IX 


2G 


2U 


3W 


2Z 


3R 


3K 


5D 


6Y 
















I 


IB 


2J 


5Y 


6N 


6R 


iv 


29 


30 


3Y 


4V 


5M 


5Z 


5Y 


6K 


6Z 








0 


2N 


2T 


2V 


3T 


5S 


6D 


1R 


IB 


2S 


2K 


3F 


4L 


5R 


5£ 










F 


6W 


1Y 


2E 


50 


6G 


6ff 


























P 


IK 


1J 


1Z 


2C 


3D 


4J 


5J 


511 


5N 


5E 


6Z 


2ff 


3fi 


3P 


3E 


3ff 


4B 


4Z 4F 6N 


0 


IS 


2S 


3Y 


4N 


4V 


4C 


6M 


6C 


3B 


3S 


4K 


4S 














X 


3J 


3P 


3V 


5K 


5X 


5A 


6T 


1H 


IS 


2H 


2fi 


3G 


3D 


4P 


5F 


6V 






z 

B 


IV 


2L 


3N 


3Z 


4T 


5R 


6L 


1A 


2P 


3H 


3X 


4M 


5N 


6L 










V 

L 


1L 


2Z 


3S 


4B 


4E 


4L 


Ifi 


2G 


3U 


51 


5fi 
















T 


IN 


2H 


2K 


311 


4P 


4H 


6H 


IF 


IT 


1M 


3A 


3N 


4T 


5E 


5X 


5V 


5S 


6X 


W 


IP 


1Y 


2A 


2E 


3A 


5P 


2T 


3T 


4G 


4Y 


40 


61 


e a 


6A 


6E 








tr 


1C 


1G 


IF 


1U 


2D 


20 


4X 


5B 


5C 


51 


IE 


4D 


4U 


5ff 


5L 


6U 






T 


2R 


2Q 


3E 


4G 


4Q 


5G 


61 


5T 






















H 


IT 


2B 


3B 


40 


5ff 


6V 


ID 


LJ 


20 


2M 


4C 


4X 














G 


3K 


3L 


4Z 


6E 


2F 


2D 


2 2 


4J 


5H 




















D 


2W 


2Y 


211 


30 


3R 


4Y 


6R 


is 


3L 


60 


















X 


2P 


3X 


3Q 


3U 


5D 


50 


511 


6Q 


6U 


2X 


5U 


5K 


6D 


6B 


611 


6F 






E 


1A 


ID 


4U 


6Y 


6B 


11 


2R 


2N 


2J 


3C 


3Z 


3U 


31 


41 










S 


3H 


4F 


5T 


6F 


1U 


10 


11 


2Y 


2U 


3J 




6fi 


6T 


6J 










N 


1R 


2F 


3G 


41 


5H 


6K 


1Z 


1L 


IK 


3V 


4N 


5B 


5A 


5P 


6P 









Underlined type denotes wheels in reversed positions. 
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Tabu L 



B 


IS 


2G 


3H 


4J 


51 


6L 


1Y 


IK 


1J 


3fi 


411 


5A 


5Z 


50 


60 








J 


IF 


411 


45 


6P 


ifi 


2H 


5R 


51 


6R 




















M 


1J 


IP 


2Y 


4B 


4E 


5R 


5V 


6B 


6H 


Ifi 


IB 


2A 


2Z 












A 


11 


IX 


3D 


3G 


3J 


4N 


4X 


511 


5A 


6Q 


6Y 


iw 


ifi 


4V 


4P 


4D 


4Z 


§fi 


Q 


2J 


4T 


5G 


6K 


4G 


§S 


























I 


1R 


IV 


1Y 


2H 


2V 


3X 


2Y 


3fi 


3J 


5fi 


6X 
















0 


1C 


2K 


5Z 


60 


6S 


Ifi 


2P 


3N 


3X 


4fi 


fit 


5Y 


5X 


6fi 


6Y 








F 


20 


2U 


2ff 


3U 


5T 


6E 


Ifi 


1A 


is 


ifi 


3E 


4K 


5Q 


5B 










P 


6X 


IX 


2D 


5N 


6F 


6V 


























0 


1L 


IK 


1A 


2D 


3E 


4K 


5K 


5N 


50 


5F 


6A 


2V 


2E 


30 


3D 


3 V 


4A 


4Y 4E 6M 


X 


IT 


2T 


3Z 


40 


4W 


4D 


6N 


6D 


3A 


3R 


4fi 


4R 














z 


3K 


3Q 


3ff 


5L 


5Y 


5B 


6U 


Ifi 


IF 


ifi 


2B 


2E 


3C 


40 


5E 


6fi 






B 

V 


Iff 


211 


30 


3A 


4U 


5S 


611 


1Z 


ifi 


3fi 


5W 


4L 


5M 


6fi 










L 

T 


111 


2A 


3T 


4C 


4F 


411 


IE 


2F 


3L 


5H 


5F 
















W 


10 


21 


2L 


3N 


4Q 


41 


61 


IE 


IS 


Ifi 


3Z 


3M 


4S 


5D 


51 


5fi 


5P 


g ff 


U 


IQ 


1Z 


2B 


2F 


3B 


5Q 


2S 


3S 


4F 


4X 


4N 


6H 


6P 


6Z 


gD 








T 


ID 


1H 


1G 


IN 


2E 


2P 


4Y 


5C 


5D 


5J 


ID 


4C 


4T 


5V 


5K 


6T 






H 


2S 


2R 


3F 


4H 


4R 


5H 


6J 


5S 






















G 


1U 


2C 


3C 


4P 


5X 


6 ff 


Ifi 


11 


ifi 


2L 


4B 


4 ff 














D 


3L 


311 


4A 


6F 


2E 


2C 


ifi 


41 


5G 




















X 


2X 


2Z 


2N 


3P 


3S 


4Z 


6S 


1R 


3K 


6fi 


















E 


2Q 


3Y 


3R 


3V 


5E 


5P 


5V 


6R 


6V 


2ff 


5T 


5J 


6C 


6A 


6L 


6E 






S 


IB 


IE 


4V 


6Z 


6C 


12 


ifi 


211 


21 


3B 


3Y 


3T 


3H 


4H 










X 


31 


4G 


5U 


6G 


IT 


IN 


1H 


2X 


2T 


31 


4fi 


6B 


6S 


61 










Underlined 


type 


denotes wheels in 


reversed 


positions. 
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Tablb Y 



B 


3J 


4H 


5V 


6H 


IS 


1M 


1G 


2ff 


2S 


3H 


4P 


§4 


6R 


6H 










J 


IT 


2H 


31 


4K 


5J 


6M 


IX 


1J 


11 


3T 


4L 


gz 


5Y 


gN 


6N 








M 


1G 


4N 


4T 


6Q 


IN 


2G 


5Q 


5H 


6S 




















A 


IK 


IQ 


2Z 


4C 


4F 


5S 


5X 


6C 


61 


1L 


14 


2Z 


2Y 












Q 


1J 


1Y 


3E 


3H 


3K 


40 


4Y 


5N 


5B 


6R 


6Z 


IV 


2J 


4U 


40 


4C 


4X 


6P 


I 


2K 


4U 


5H 


6L 


4F 


6F 


























O 


IS 


IV 


1Z 


21 


2ff 


3Y 


2X 


3P 


31 


5B 


6ff 
















P 


ID 


2L 


5A 


6P 


6T 


IT 


20 


3M 


3V 


4T 


5K 


5X 


gw 


61 


IX 








P 


2P 


2V 


2X 


3V 


5U 


6F 


IP 


1Z 


2S 


21 


ID 


4J 


5P 


14 










O 


6Y 


Iff 


2C 


5M 


6E 


6U 


























X 


1M 


1L 


IB 


2E 


3F 


4L 


5L 


50 


5P 


5G 


6B 


2U 


IS 


3N 


IS 


3U 


4Z 


4X 4D 6L 


z 


1U 


2U 


3A 


4P 


4X 


4E 


60 


6E 


3Z 


IS 


41 


42 














B 


3L 


3R 


3X 


5M 


5Z 


5C 


6V 


IF 


IE 


2F 


24 


3E 


IS 


4N 


IS 


6T 






V 

L 


IX 


2N 


3P 


3B 


4V 


5T 


6N 


1Y 


2N 


IE 


IY 


4K 


gL 


6J 










Y 

W 


IN 


2B 


3U 


4D 


4G 


4N 


10 


2E 


3K 


5G 


5E 
















U 


IP 


2J 


2M 


30 


4R 


4J 


6J 


ID 


1R 


IK 


IX 


IL 


4R 


IS 


5V 


5T 


IS 


6V 


T 


1R 


1A 


2C 


2G 


3C 


5R 


2R 


3R 


4E 


M 


4H 


6G 


60 


IX 


IS 








H 


IE 


11 


1H 


10 


2F 


2Q 


4Z 


5D 


5E 


5K 


1C 


4B 


4S 


5U 


5J 


6S 






G 


2T 


2S 


3G 


41 


4S 


51 


6K 


5R 








# 














D 


IV 


2D 


3D 


4Q 


5Y 


6X 


IB 


1H 


2M 


2K 


4A 


4V 














X 


3U 


3N 


4B 


6G 


2D 


2B 


2T 


4H 


5F 




















E 


2Y 


2A 


20 


3Q 


3T 


4A 


6T 


IS 


3J 


6M 


















S 


2R 


3Z 


3S 


3W 


5F 


5Q 


5W 


6S 


6ff 


2V 


5S 


§1 


IS 


6Z 


6K 


6D 






X 


1C 


IF 


4W 


6A 


6D 


1U 


2P 


2L 


2H 


14 


3X 


IS 


is 


4G 











Underlined type denotes wheels in reversed positions. 
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Tabus W 

B ID 1G 4X 6B 6E IT gO 2J£ 2G 3Z 3ff 3R 3F 4F 

J 3K 41 5W 61 1R 1L IF 2V 3G 40 6Z 6Q 6G 

M 1U2I3J4L5K6N1W1I1H3S4K5Y5X5M^ 

A 1H 40 4U 6R 1M g£ gP gG 6P 

Q 1L 1R 2A 4D 4G 5T 5Y 6D 6J IK 1Z 2Y 2X 

I IK 1Z 3F 31 3L 4P 4Z 50 5C 6S 6A 1U 21 4T 4N 4B 4X 60 

O 2L 4V 51 6M 4E 6E 

P 1T1X1A2J2X3Z2W303H5A6V 
P lE2M5B6Q6UlS2N3L3V^5J5W5V6H6ff 
0 2Q2W2Y3ff5V6G101Y2P2H3C4I505Z 
X 6Z IV 2B 5L 6D 6T 

Z IN 1M 1C 2F 3G 4M 5M 5P 5Q 5H 6C 2T 5N 5M 3B 3T 4Y 4W 4C 6K 

B IV 2V 3B 4Q 4Y 4F 6P 6F 3Y 3P 4H 4P 

V 3M 3S 3Y 5N 5A 5D 6ff IE ID 2E 2Z 3D 3A gC 6S 

L 1Y 20 3Q 3C 4W 5U 60 IX 2M 3E 3U 4J 5K 61 

T 

W 

IT 10 2C 3V 4E 4H 40 IN 2D 3J 5F 5D 

T 1Q2K2N3P4S4K6K1C1Q1J3X3K4Q5B5U5S5N6U 
H IS IB 2D2H 3D5S233Q4D4V4L6F6N6X6B 
G IF 1J II IP 2G 2R4A 5E 5F 5L IB 4A 4R 5T 51 6R 
D 2U 2T 3H 4J 4T 5J 6L 5Q 

X 1W 2E 3E 4R 5Z 6Y 1A 1G 2L 2J 4Z 4U 

E 3N 30 4C 6H gC 2& 2S 4G 5E 

S 2Z 2B 2P 3R 3U 4B 6U IP 31 6L 

X 2S 3A 3T 3X 5G 5R 5X 6T 6X 2U 5R 5H 6A 6Y 6J 6C 

Underlined type denotes wheels in reversed positions. 
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Tabu U 



B 


2T 


3B 


3U 


3Y 


5H 


5S 


5Y 


6U 


6Y 


2T 


59 


IS 


6Z 


6X 


61 


6B 






J 


IE 


1H 


4Y 


6C 


6F 


IS 


2N 


2J 


2F 


3Y 


3V 


39 


3E 


4E 










M 


3L 


4J 


5X 


6J 


19 


IK 


IE 


2U 


29 


3F 


4N 


6Y 


6P 


6F 










A 


IV 


2J 


3K 


4U 


5L 


60 


IV 


1H 


1G 




4J 


5X 


5S 


5L 


6L 








Q 


11 


4P 


4V 


6S 


1L 


2E 


50 


5F 


60 




















I 


lM 


IS 


2B 


4E 


4H 


5U 


5Z 


6E 


6K 


LJ 


1Y 


2X 


21 












O 


1L 


1A 


3G 


3J 


3U 


4Q 


4A 


5P 


5D 


6T 


6B 


IT 


2H 


4S 


4M 


4A 


4 V 


6N 


P 


2M 


4W 


5J 


6N 


4D 


6D 


























P 


1U 


1Y 


IB 


2K 


2Y 


3A 


2V 


3N 


3G 


5Z 


6U 
















0 


IF 


2N 


5C 


6R 


6V 


1R 


2M 


3K 


3U 


4R 


51 


5V 


5U 


6G 


6V 








X 


2R 


2X 


2Z 


3X 


5W 


6H 


IN 


IX 


20 


2G 


3B 


4H 


5N 


5Y 










z 


6A 


iu 


2A 


5K 


6C 


6S 


























B 


10 


IN 


ID 


2G 


3H 


4N 


5N 


5Q 


5R 


51 


6D 


2§ 


3H 


3L 


3A 


3S 


4X 


4V_4B_6J 


V 


IV 


2W 


3C 


4R 


4Z 


4G 


6Q 


6G 


3X 


30 


46 


40 














L 


3N 


3T 


3Z 


50 


5B 


5E 


6X 


ID 


ic 


2D 


2Y 


3C 


3Z 


4L 


5B 


6R 






T 


1Z 


2P 


3R 


3D 


4X 


5V 


6P 


IV 


2L 


3D 


3T 


41 


5J 


6H 











W 

V 



T 


IP 


2D 


3V 


4F 


41 


4P 


1M 


2C 


31 


5E 


5C 












H 


1R 


2L 


20 


3Q 


4T 


4L 


6L 


IB 


IP 


11 


5ff 


3J 


4P 


5A 


5T 


5R 5H 6T 


G 


IT 


1C 


2E 


21 


3E 


5T 


2P 


3P 


4C 


4U 


4K 


6E 


6M 


6V 


6A 




D 


1G 


IK 


1J 


IQ 


2H 


2 S 


4B 


5F 


5G 


511 


1A 


4Z 


49 


5S 


5H 


69 


X 


2V 


2U 


31 


4K 


4U 


5K 


6M 


IP 


















E 


IX 


2F 


3F 


4S 


5A 


6Z 


1Z 


IF 


2K 


21 


4Y 


4T 










S 


30 


3P 


4D 


61 


2B 


2Z 


2R 


4F 


5D 
















N 


2A 


2C 


or 

CM 


3S 


3V 


4C 


6V 


10 


3H 


6K 















Underfilled type denotes wheels in reversed positions. 



Table T 

B 2B2D2R3T3V4D6V1N3G6J 

J 2U 3C 3V 3Z 51 5T 5Z 6V 6Z 2S 5P 5F 6Y 6W 6H 6A 

M IF II 4Z 6D 6G 1R 2M 21 2E 3X 3U 3P 3D 4D 

A 3M4K5Y6KlPUlD2T2P3E^fDC606| 

Q 1W2K3L4N5H6P1U1G1F3Q4I5W5V5K6K 
I 1J4Q4W6T1K2D5N5E6N 
0 IN IT 2C 4F 41 5V 5A 6F 6L II IX 2V 2V 

7 1M IB 3H 3K 3N 4R 4B 5Q 5E 6U 6C IS 2G 4R 4L 4Z 4V 6M 

P 2N 4X 5K 60 4C 6C 

0 IV 1Z 1C 2L 2Z 3B 2U 3M 3F 5Y 6T 

X 1G205D6S6W1Q2L3J3T4Q5H5U5T6F6U 
Z 2S 2Y 2A 3Y 5X 61 lM Iff 2N 2F 3A 4G 5M 5X 
B 6B IT 2Z 5J 6B 6R 

V IP 10 IE 2H 31 40 50 5R 5S 5J 6E 2R 3L 3K 3Z 3R 4W 4U 4A 61 

L 1X2X3D4S4A4H6R6H3V3N4F4N 

T 30 3U 3A 5P 5C 5F 6Y 1C IB 2C 2X 3B 3Y 4K 5A iQ 

W 1A 2Q 3S 3E 4Y 5W 6Q IV 2K 3C 3S 4H 51 6G 

U 

T 

H 1Q2E3X4G4J4Q1L2B3H5D5B 

G IS 2-M 2P 5R 4U 4M 6M 1A 10 1H 5V 51 40 5Z 5S 5Q 5L gS 
D 1U1D2F2J3F5U20304B4T4J6D6L6V6Z 

K 1H 1L IK 1R 21 2T 4C 5G 5H 5N 1Z 4Y 4P 5R 5G 6P 

B 2W 2V 3J 4L 4V 5L 6N 50 

8 1Y 2G 3G 4T 5B 6A 1Y IE 2J 2H 4X 4S 

N 3P3Q4E6J2A2Y2£4E5C 
Underlined type denotes wheels In reversed positions. 
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Tabu H 



B 


3Q 


3R 


4F 


6K 


2Z 


2X 


2P 


4D 


5B 


















J 


2C 


2E 


2S 


3U 


3X 


4E 


6X 


IB 


3F 


61 
















M 


2V 


3D 


3 ff 


3A 


5J 


5U 


5A 


6ff 


6A 


2R 


50 


5E 


6X 


6V 


6G 


6Z 


i 


A 


1G 


1J 


4A 


6E 


6H 


19 


2L 


W. 


2D 


3W 


3T 


30 


3C 


4C 






I 


Q 


3N 


4L 


5Z 


6L 


10 


ll 


1C 


2S 


20 


3D 


4L 


6W 


6N 


6D 






i 

i 


I 


IX 


2L 


3M 


40 


5N 


6Q 


IT 


IF 


IE 


3P 


4H 


5V 


5U 


5J 


6J 




i 


0 


IK 


4R 


4X 


6U 


1J 


2C 


5M 


5D 


6M 
















i 


F 


10 


1U 


2D 


4G 


4J 


5V 


5B 


6G 


6U 


1H 


IV 


2V 


2U 








l 


P 


IN 


1C 


31 


3L 


30 


4S 


4C 


5R 


5F 


6V 


6D 


1R 


2F 


49 


4K 


4Y 4U 


6L 


0 


20 


4Y 


5L 


6P 


4B 


6B 






















| 


X 


IV 


1A 


ID 


2H 


2A 


3C 


2T 


3L 


3E 


5X 


6S 














z 


1H 


2P 


5E 


6T 


6X 


IP 


2K 


31 


3S 


4P 


5G 


5T 


5S 


6E 


6T 






B 


2T 


2Z 


2B 


3Z 


5Y 


6J 


1L 


IV 


2M 


2E 


3Z 


4F 


5L 


5W 






•• 


V 


6C 


IS 


2Y 


51 


6A 


69 






















l 

| 


L 


IQ 


IP 


IF 


21 


3J 


4P 


5P 


5S 


5T 


5K 


6F 


29 


3K 


3J 


3Y 


39 4V 


4T 4Z 6H 


T 


1Y 


2Y 


3E 


4T 


4B 


41 


6S 


61 


3V 


3M 


4E 


4M 












W 


3P 


3V 


3B 


5Q 


5D 


5G 


6Z 


IB 


1A 


2B 


2W 


3A 


3X 


4J 


5Z 


6P 




u 

T 


IB 


2R 


3T 


3F 


4Z 


5X 


6R 


iu 


2J 


3B 


3R 


4G 


5H 


6F 








H 

G 


1R 


2F 


3Y 


4H 


4K 


4R 


IK 


2A 


3G 


5C 


5A 














D 


IT 


2N 


c r 

CM 


3S 


4V 


4N 


6N 


1Z 


IN 


1G 


3U 


3H 


4N 


5Y 


5R 


5P ® 


6R 


X 


IV 


IE 


2G 


2K 


3G 


5V 


2N 


3N 


4A 


4S 


41 


6C 


6K 


6U 


6Y 






E 


11 


1H 


1L 


IS 


2J 


2U 


4D 


5H 


51 


50 


1Y 


4X 


40 


59 


5F 


60 




S 


2X 


2V 


3K 


4M 


4ff 


5M 


60 


5N 




















X 


1Z 


2H 


3H 


4U 


5C 


6B 


IX 


ID 


21 


2G 


4W 


4R 













Underlined type denotea wheels In reversed positions. 
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Tabu O 



B 


1A 


21 


31 


4V 


5D 


6C 


1W 


1C 


2H 


2F 


4V 


49 














J 


3R 


3S 


4G 


6L 


2Y 


2V 


20 


4C 


5A 












■ 








M 


2D 


2F 


2T 


3V 


3Y 


4F 


6Y 


1L 


Si 


Si 


















A 


2V 


3E 


3X 


3B 


5K 


5V 


5B 


6X 


6B 


29 


5N 


5D 


6V 


6U 


6F 


6Y 






Q 


1H 


IK 


4B 


6F 


61 


IP 


2K 


2G 


2C 


3V 


3S 


3! 


3B 


4B 










I 


30 


4H 


5A 


6M 


IN 


1H 


IB 


2R 


2N 


3C 


4K 


6V 


6M 


6C 










O 


1Y 


2M 


3N 


4P 


50 


6R 


IS 


IE 


ID 


30 


4G 


5U 


5T 


51 


61 








F 


1L 


4S 


4Y 


6V 


11 


2B 


5L 


5C 


6L 




















P 


IP 


IV 


2E 


4H 


4K 


5X 


5C 


6H 


6N 


1G 


IV 


2U 


2T 












0 


10 


ID 


3J 


3N 


3P 


4T 


4D 


5S 


5G 


6V 


6E 


19 


2E 


4P 


M 


Si 


SC 


6K 


X 


2P 


4Z 


5M 


6Q 


4A 


6A 


























z 


IX 


IB 


IE 


2N 


2B 


3D 


2S 


3K 


3D 


5V 


6R 
















B 


11 


2Q 


5F 


6U 


6Y 


10 


2J 


Si 


3R 


40 


5F 


5S 


5R 


6D 


6S 








V 


2U 


2A 


2C 


3A 


5Z 


6K 


IK 


iu 


2L 


2D 


3Y 


4E 


5K 


5V 










L 


6D 


1R 


2X 


5H 


6Z 


6P 


























T 


1R 


IQ 


1G 


2J 


3K 


4Q 


5Q 


5T 


5U 


5L 


6G 


2P 


3J 


31 


3X 


3P 


4U 


4S 4Y 6G 


W 


1Z 


2Z 


3F 


4U 


4C 


4J 


6T 


6J 


3U 


3L 


4D 


Si 














u 


3Q 


3V 


3C 


5R 


5E 


5H 


6A 


1A 


1Z 


2A 


2V 


3Z 


3V 


41 


5Y 


60 






T 

H 


1C 


2S 


3U 


3G 


4A 


5Y 


6S 


IT 


21 


3A 


39 


4F 


5G 


6E 










G 

D 


IS 


2G 


3Z 


41 


4L 


4S 


1J 


2Z 


3F 


5B 


5Z 
















X 


1U 


20 


2R 


3T 


4V 


40 


60 


1Y 


1M 


IF 


3T 


3G 


4H 


5X 


59 


50 


5J 


69 


E 


IV 


IF 


2H 


2L 


3H 


5V 


2N 


3M 


4Z 


4R 


Si 


6B 


6J 


6T 


6X 








S 


1J 


IN 


IN 


IT 


2K 


2V 


4E 


51 


5J 


5P 


1J 


4V 


4N 


5P 


5E 


6N 






X 


2Y 


2X 


3L 


4N 


4X 


5N 


6P 


5H 























Underlined type denotes wheels in reversed positions. 
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Tabu D 



B 


ZZ 


2Y 


311 


40 


4Y 


50 


6Q 


5L 






















J 


IB 


2J 


3J 


4V 


5E 


6D 


IV 


IB 


2G 


2E 


4U 


4E 














M 


3S 


3T 


4H 


611 


2X 


2V 


2N 


4B 


5Z 




















A 


2E 


26 


2U 


3ff 


3Z 


4G 


6Z 


IK 


3D 


6G 


















Q 


2X 


3F 


3Y 


3C 


5L 


5ff 


5C 


6Y 


6C 


2P 


511 


5C 


6 V 


6T 


6E 


6X 






I 


11 


1L 


4C 


6G 


6J 


10 


2J 


2F 


2B 


3U 


3R 


3M 


3A 


4A 










0 


3P 


4N 


5B 


6N 


1M 


1G 


1A 


29 


2H 


3B 


4 J 


6U 


6L 


6B 










F 


1Z 


2N 


30 


4Q 


5P 


6S 


IE 


ID 


1C 


3N 


4F 


5T 


5S 


5H 


6H 








P 


1M 


4T 


4Z 


6V 


1H 


2A 


5K 


5B 


6K 




















0 


IQ 


Iff 


2F 


41 


4L 


5Y 


5D 


61 


60 


IF 


1U 


2T 


2S 












X 


IP 


IE 


3K 


3N 


0) 

JO 


4U 


4E 


5T 


5H 


6X 


6F 


IE 


2D 


40 


41 


4! 


4S 


6J 


z 


2Q 


4A 


5N 


6R 


4Z 


6Z 


























B 


1Y 


1C 


IF 


20 


2C 


3E 


2R 


3J 


3C 


5V 


6Q 
















V 


1J 


2R 


5G 


6V 


6Z 


IN 


21 


3G 


3S 


4N 


5E 


5R 


59 


6C 


§R 








L 


2V 


2B 


2D 


3B 


5A 


6L 


1J 


IT 


2K 


2C 


3X 


4D 


5J 


5U 










Y 


6E 


IS 


2ff 


5G 


§Y 


60 


























W 


IS 


1R 


1H 


2K 


3L 


4R 


5R 


5U 


5V 


511 


6H 


20 


31 


5E 


3fi 


30 


42 


4R 4X 6F 


U 


1A 


2A 
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Underlined type denotes wheels in reversed positions. 
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Underlined type denotes wheels in reversed positions. 
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Appendix VI 

SUMMARY OF RESULTS 

By using the values derived from a study of the “V” and “Z” messages it was possible 
to find messages in which three values of the indicator were known — the first, second, and fifth 
letters. A little experimentation soon yielded the value of the remaining two indicator letters 
and also values for the “dog setting” square. 

The lines d and r indicate which letters correspond to direct and reversed setting; respectively, 
of the wheels. 

Figure 1 gives the dog setting corresponding to the various combinations of the first two 
wheels. There are no values entered in row 5 or in column 5 because in the messages submitted 
wheel 5 was not used. 

Figure 2 gives the plain-text equivalents for the enciphered indicators. 

Figure 3 gives the complete settings of those cipher messages which were read. No attempt 
was to read any further messages since it appeared that a complete solution would be a 
matter of time only. 
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Enciphered Deciphered Message 
Indicator Indicator Ko. 

ZRZPP=YALPB (156) 

61343 

VDLSU=HKXJA (162) 

34631 

MRLDO=DAXUC (179) 

31643 

BSKVF=WCDZ (186) 

84136 

LPDUU=CFTEA (189) 

34631 

SSSVJ=GVHDE (196) 

36413 

VGBKL=HIAWQ (210) 

33164 



Enciphered Deciphered Message 
Indicator Indicator No. 

SCRLT=G0JCK (218) 

36314 

DRTUV=FANEH (252) 

31634 

NNBQU=NQAIA (253) 

46133 

DDJQP=FKDIH (229) 

36143 

QRPCP=JA0MB (206) 

31643 

PSYLV=ZVQCH (177) 

64313 

RNTLE— IQNCO (165) 
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